Linux Kernel TTY操作NULL指针引用拒绝服务漏洞

BUGTRAQ ID: 30076 CVE ID：CVE-2008-2812 CNCVE ID：CNCVE-20082812 Linux是一款开放源代码的操作系统。 Linux TTY操作在主线上的重写存在NULL指针引用问题，本地攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 Linux kernel 2.6.25 .5 Linux kernel 2.6.25 Linux kernel 2.6.24 .2 Linux kernel 2.6.24 .1 Linux kernel 2.6.24 -rc5 Linux kernel 2.6.24 -rc4 Linux kernel...

Linux Kernel 2.6.23 - 2.6.24 vmsplice Local Root Exploit

No description provided by source. / dianelanefuckedhard.c Linux vmsplice Local Root Exploit By qaaz Linux 2.6.23 - 2.6.24 / define GNUSOURCE include stdio.h include errno.h include stdlib.h include string.h include unistd.h include sys/uio.h define TARGETPATTERN " sysvm86old" define TARGETSYSCAL...

CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference

=== ABSTRACT ========================================================= A new vmsplice system call was introduced in the 2.6.17 release of the Linux kernel. In the 2.6.23 kernel the system call functionality has been further extended resulting in two new critical vulnerabilities. === AFFECTED...

Linux Kernel 2.6.23 - 2.6.24 vmsplice Local Root Exploit

Exploit for linux platform in category local exploits ======================================================== Linux Kernel 2.6.23 - 2.6.24 vmsplice Local Root Exploit ======================================================== / dianelanefuckedhard.c Linux vmsplice Local Root Exploit By qaaz Linux...

Linux Kernel 2.6.23 < 2.6.24 - 'vmsplice' Local Privilege Escalation (1)

/ dianelanefuckedhard.c Linux vmsplice Local Root Exploit By qaaz Linux 2.6.23 - 2.6.24 / define GNUSOURCE include include include include include include define TARGETPATTERN " sysvm86old" define TARGETSYSCALL 113 ifndef NRvmsplice define NRvmsplice 316 endif define vmsplicefd,io,nr,fl...

CVE-2007-6434

CVE-2007-6434 affects Linux kernel 2.6.23. A local attacker can create low pages in virtual userspace memory and bypass mmap_min_addr protection by supplying a crafted executable that calls do_brk. This is a local-attack scenario with partial impact on availability as per CVSS 2.0 (low base score...

CVE-2007-6151

The isdnioctl function in isdncommon.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow...

CVE-2007-6151

CVE-2007-6151 affects the Linux kernel ISDN subsystem (ISDN ioctl path). The description in the Initial document states a local user can trigger a denial-of-service via a crafted ioctl struct where iocts is not null-terminated, causing a buffer overflow in isdn_common.c. Connected documents (RHSA...

Linux Kernel ISDN_Net.C本地缓冲区溢出漏洞

BUGTRAQ ID: 26605 CVE ID:CVE-2007-6063 CNCVE ID:CNCVE-20076063 Linux是一款开放源代码的操作系统。 Linux包含的'isdnnetsetcfg'函数存在设计错误，本地攻击者可以利用漏洞进行缓冲区溢出攻击，可能提升特权。 在isdnioctl函数中会调用isdnnetsetcfg： isdnioctl drivers/isdn/i4l/isdncommon.c: 1270 isdnioctlstruct inode inode, struct file file, uint cmd, ulong arg...

CVE-2007-6063

Buffer overflow in the isdnnetsetcfg function in isdnnet.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdnioctl function...

Buffer overflow

Buffer overflow in the isdnnetsetcfg function in isdnnet.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdnioctl function...

CVE-2007-6063

CVE-2007-6063 is referenced in MiracleLinux AXSA-2008-150:05 as a fix for a possible isdn_net buffer overflow in the Linux kernel, specifically related to isdn_net_setcfg. The connected advisory notes the kernel vulnerability affects Miracl eLinux 3.x with kernel-2.6.18-53.11AXS3 and lists CVE-20...

CVE-2007-5904

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function...

kernel: Missing ioctl() permission checks in aacraid driver

The 1 aaccfgopen and 2 aaccompatioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges...