kernel
by OpenBSD
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-6244 | Hig | 0.49 | 7.5 | 0.02 | Mar 7, 2017 | The sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service (panic) via a negative "ts.tv_sec" value. | ||
| CVE-2019-8460 | Hig | 0.42 | 7.5 | 0.02 | Aug 26, 2019 | OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service. | ||
| CVE-2021-34999 | Med | 0.36 | 5.5 | 0.00 | May 7, 2024 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute… | ||
| CVE-2021-35000 | Low | 0.21 | 3.3 | 0.00 | May 7, 2024 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute… | ||
| CVE-1999-0482 | 0.00 | — | 0.01 | Mar 21, 1999 | OpenBSD kernel crash through TSS handling, as caused by the crashme program. |
- risk 0.49cvss 7.5epss 0.02
The sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service (panic) via a negative "ts.tv_sec" value.
- risk 0.42cvss 7.5epss 0.02
OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.
- risk 0.36cvss 5.5epss 0.00
OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute…
- risk 0.21cvss 3.3epss 0.00
OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute…
- CVE-1999-0482Mar 21, 1999risk 0.00cvss —epss 0.01
OpenBSD kernel crash through TSS handling, as caused by the crashme program.