WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Oracle product: Oracle Communications Applications / Security (Kernel)✕
Overview 6 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
6matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC50.0% 3EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 16.7% Not applicable 5 83.3% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 5 83.3% Medium 1 16.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 6 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 33.3% Proof of concept only 1 16.7% Forecast only 1 16.7% No public exploit 2 33.3%
split by peak 1 / quarter
Not applicable: 5Outside Waratek scope: 1 Medium: 1High: 5 not blocked: 6 No public exploit: 2Forecast only: 1Proof of concept only: 1Working exploit published: 2
Q1 171 Not applicable1 High1 not blocked1 Working exploit published1 Q2 170 Q3 170 Q4 171 Not applicable1 High1 not blocked1 No public exploit1 Q1 181 Outside Waratek scope1 Medium1 not blocked1 Working exploit published1 Q2 180 Q3 181 Not applicable1 High1 not blocked1 Forecast only1 Q4 180 Q1 191 Not applicable1 High1 not blocked1 No public exploit1 Q2 191 Not applicable1 High1 not blocked1 Proof of concept only1
Q1 17Q2 17Q3 17Q4 17Q1 18Q2 18Q3 18Q4 18Q1 19Q2 19
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2019-11477 High 2019-06-19 Not applicable Proof of concept only Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
CVE-2018-16864 High 2019-01-11 Not applicable No public exploit An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
CVE-2018-5390 High 2018-08-06 Not applicable Forecast only Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVE-2017-5715 Medium 2018-01-04 Outside Waratek scope Working exploit published Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2017-0861 High 2017-11-16 Not applicable No public exploit Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVE-2017-6074 High 2017-02-18 Not applicable Working exploit published The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.