enterprise linux compute node eus CVEs · Outside Waratek scope

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 2 100.0% Not applicable 0 0.0% Withdrawn CVE 0 0.0%

Critical 0 0.0% High 1 50.0% Medium 0 0.0% Low 1 50.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%

split by StatusSeverityProtectionExploit maturity peak 1 / month

Jan 191 Outside Waratek scope1 Low1 not blocked1 No public exploit1 Feb 190 Mar 190 Apr 190 May 190 Jun 190 Jul 190 Aug 190 Sep 191 Outside Waratek scope1 High1 not blocked1 No public exploit1

Jan 19Feb 19Mar 19Apr 19May 19Jun 19Jul 19Aug 19Sep 19

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2019-14816	High	2019-09-20	Outside Waratek scope	No public exploit	There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2018-16866	Low	2019-01-11	Outside Waratek scope	No public exploit	An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2019-14816

High

2019-09-20

Outside Waratek scope

No public exploit

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

CVE-2018-16866

Low

2019-01-11

Outside Waratek scope

No public exploit

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.