Oracle Communications / OS (Linux Kernel) CVEs

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 2 100.0% Not applicable 0 0.0% Withdrawn CVE 0 0.0%

Critical 0 0.0% High 1 50.0% Medium 1 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 50.0% No public exploit 1 50.0%

split by StatusSeverityProtectionExploit maturity peak 1 / month

Apr 191 Outside Waratek scope1 High1 not blocked1 No public exploit1 May 190 Jun 190 Jul 190 Aug 190 Sep 190 Oct 190 Nov 190 Dec 190 Jan 200 Feb 200 Mar 200 Apr 201 Outside Waratek scope1 Medium1 not blocked1 Forecast only1

Apr 19Jun 19Aug 19Oct 19Dec 19Feb 20Apr 20

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2020-1927	Medium	2020-04-02	Outside Waratek scope	Forecast only	In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
CVE-2019-3900	High	2019-04-25	Outside Waratek scope	No public exploit	An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2020-1927

Medium

2020-04-02

Outside Waratek scope

Forecast only

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.

CVE-2019-3900

High

2019-04-25

Outside Waratek scope

No public exploit

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.