Mandriva Linux Security Advisory : MHonArc (MDVSA-2011:003)

Multiple vulnerabilities has been found and corrected in MHonArc : MHonArc 2.6.16 allows remote attackers to cause a denial of service CPU consumption via start tags that are placed within other start tags, as demonstrated by a dydydydy sequence, a different vulnerability than CVE-2010-4524...

CVE-2010-4238

The vbdcreate function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5 is used, allows guest OS users to cause a denial of service host OS panic via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these details are obtained fr...

Oracle Linux 5.6 kernel security and bug fix update

2.6.18-238.el5 - net bnx2: remove extra call to pcimappage John Feeney 663509 - fs nfs: set lockcontext field in nfsreadpagesync Jeff Layton 663853 2.6.18-237.el5 - block fully zeroize request struct in rqinit Rob Evers 662154 - scsi qla4xxx: update to 5.02.04.02.05.06-d0 Chad Dupuis 656999 - scs...

[ MDVSA-2011:003 ] MHonArc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:003 http://www.mandriva.com/security/ Package : MHonArc Date : January 10, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been...

CVE-2010-4247

The doblockioop function in 1 drivers/xen/blkback/blkback.c and 2 drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service infinite loop and CPU consumption via a large production request index to...

PT-2011-1486 · Linux +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 3.4.0 for the Linux kernel 2.6.18 Description: The issue allows guest OS users to cause a denial of service, resulting in an infinite loop and CPU consumption. This is achieved by sending a large production request index...

CVE-2010-4161

The udpqueuercvskb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service deadlock and system hang by sending UDP traffic to a socket that has a crafted socket filter, a related issue to...

kvm security update

kvm-83-164.0.1.el55.25 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-164.el55.25 - Adding loadgsindex to kmod symbol greylist - Related: bz639886 CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic rhel-5.5.z...

kernel security update

2.6.18-194.17.1.0.2.el5 - rds fix access issue with rds Chris Mason CVE-2010-3904 orabug 10226701...

Moderate: Red Hat Security Advisory: gfs-kmod security update

Updated gfs-kmod packages that fix one security issue are now available for Red Hat Enterprise Linux 5.4 Extended Update Support, kernel release 2.6.18-164.19.1.el5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...

kernel security and bug fix update

2.6.18-194.8.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug 69930...

Design/Logic Flaw

arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, allows local users to cause a denial of service and "turn on BE by modifying the user mask of the PSR," as demonstrated via exploitation of CVE-2006-0742...

Linux Kernel 2.6.18 - 'move_pages()' Information Leak

/ sieve because the Linux kernel leaks like one, get it? Bug NOT discovered by Marcus Meissner of SuSE security This bug was discovered by Ramon de Carvalho Valle in September of 2009 The bug was found via fuzzing, and on Sept 24th I was sent a POC DoS for the bug but had forgotten about it until...

Code injection

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

CVE-2009-3556

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

CVE-2009-4272

A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5 allows remote attackers to cause a denial of service deadlock via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chai...

PT-2010-1342 · Red Hat +1 · Red Hat +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.18 on Red Hat Enterprise Linux RHEL 5 Description: The issue allows remote attackers to cause a denial of service deadlock via crafted packets that force collisions in the IPv4 routing hash table, triggering a routing...

Linux 2.6.18-20 2009 Local Root

Author: DigitALL Version: 2.6.18-20 Tested on: Linux System Greetz To: Zombie KroNicKq and All 1923turk.Biz Members Code : 2.6.18 2008 Exploit's İs Edited 2009 Version.I Am Tested 2.6.18-20 2009 Linux is Rooted.Coming Soon.By DigitALL define GNUSOURCE include include include include include inclu...

Linux Kernel 2.6.18 2.6.18-20 - Local Privilege Escalation

Linux Kernel 2.6.18 2.6.18-20 - Local Privilege Escalation / Author: DigitALL Version: 2.6.18-20 Tested on: Linux System Greetz To: Zombie KroNicKq and All 1923turk.Biz Members Code : 2.6.18 2008 Exploit's s Edited 2009 Version.I Am Tested 2.6.18-20 2009 Linux is Rooted.Coming Soon.By DigitALL ED...

Linux Kernel 2.6.18 < 2.6.18-20 - Local Privilege Escalation

/ Author: DigitALL Version: 2.6.18-20 Tested on: Linux System Greetz To: Zombie KroNicKq and All 1923turk.Biz Members Code : 2.6.18 2008 Exploit's s Edited 2009 Version.I Am Tested 2.6.18-20 2009 Linux is Rooted.Coming Soon.By DigitALL EDB Note: Adding include may help it compile / define GNUSOUR...