PT-2011-1106 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 kernel-devel-2.6.9 kernel-doc-2.6.9 kernel-hugemem-2.6.9 kernel-2.6.9 kernel-largesmp-2.6.9 kernel-smp-devel-2.6.9 kernel-smp-2.6.9 kernel-hugemem-devel-2.6.9 kernel-largesmp-devel-2.6.9...

PT-2011-1446 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 Description: The issue concerns the get name function in net/tipc/socket.c, which fails to initialize a certain structure. This allows local users to obtain potentially sensitive information from kern...

PT-2010-5135 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 Description: The issue is related to the improper auditing of INET DIAG bytecode in the Linux kernel. Local users can cause a denial of service, specifically a kernel infinite loop, by sending crafted...

Linux Kernel "pipe_fcntl()"本地拒绝服务漏洞

BUGTRAQ ID: 45125 CVECAN ID: CVE-2010-4256 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成内核崩溃，拒绝服务合法用户。 Linux kernel 2.6.35-rc1 - 2.6.37 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

kernel: perf bug

Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call...

Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - 'Full-Nelson.c' Local Privilege Escalation

/ Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which were discovered by Nelson Elhage: CVE-2010-4258 ------------- This is the interesti...

Linux Kernel "posix-cpu-timers.c"本地竞争条件漏洞

BUGTRAQ ID: 45028 CVE ID: CVE-2010-4248 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，攻击者可以利用此漏洞引起内核瘫痪，异常终止受影响的计算机。 posix-cpu-timers.c认为将要终止的进程会执行posixcputimersexitgroup并将从 signal-cputimers列表中删除所有!CPUCLOCKPERTHREAD计时器。但它错误地认为 timer-it.cpu.task总是组前导，这样dead -task就表示不作用的线程组。 Linux kernel...

Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service

Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service / Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : See source attached. Proce...

Linux Kernel 2.6.37 - setup_arg_pages() Denial of Service

Linux Kernel 2.6.37 - setupargpages Denial of Service // source: https://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address spac...

Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service

// source: https://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address space, they're limited to 1/4th of a 64bit address space -...

PT-2010-5334 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 Description: The issue is related to a use-after-free vulnerability in the mm/mprotect.c file of the Linux kernel. This vulnerability can be exploited by local users to cause a denial of service throu...