179 matches found
RHEL 3 : kernel (RHSA-2008:0973)
Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...
Debian Security Advisory DSA 1588-2 (linux-2.6)
The remote host is missing an update to linux-2.6 announced via advisory DSA 1588-2. OpenVAS Vulnerability Test $Id: deb15882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1588-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1588-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Kernel ipip6_rcv()函数远程拒绝服务漏洞
BUGTRAQ ID: 29235 CVECAN ID: CVE-2008-2136 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/ipv6/sit.c文件中的ipip6rcv函数中存在内存泄露漏洞，如果远程攻击者向简单Internet传输（SIT）隧道接口发送了与pskbmaypull、kfreeskb函数和skb引用计数管理相关的恶意网络通讯的话，就可能触发这个漏洞，导致耗尽内存。 Linux kernel 2.6.25.3 Debian ------ Debian已经为此发布了一个安全公告（DSA-1588-2）以及相应补丁:...
[SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1588-2 [email protected] http://www.debian.org/security/ dann frazier May 30, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1588-1 [email protected] http://www.debian.org/security/ dann frazier May 27, 2008 http://www.debian.org/security/faq -...
Debian DSA-1588-1 : linux-2.6 - denial of service
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6712 Johannes Bauer discovered an integer overflow condition in the hrtimer subsystem on 64-bit...
[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1588-1 [email protected] http://www.debian.org/security/ dann frazier May 27, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
Linux Kernel IPv6 over IPv4 Memory Leak Denial of Service (CVE-2008-2136)
Linux is a popular open-source operating system that supports the IPv4 and IPv6 network protocols. IPv6 over IPv4 tunneling is a technique that encapsulates IPv6 packets within IPv4 headers to transit them over IPv4 routing infrastructures. A denial of service vulnerability has been reported in t...
CVE-2008-2136
Memory leak in the ipip6rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service memory consumption via network traffic to a Simple Internet Transition SIT tunnel interface, related to the pskbmaypull and...
CVE-2008-2136
The CVE-2008-2136 entry affects the Linux kernel SIT driver: a memory leak in ipip6_rcv (net/ipv6/sit.c) can be triggered by network traffic to a SIT tunnel, due to improper skb handling (pskb_may_pull and kfree_skb) and skb reference count management. Vulnerable on Linux kernel 2.4 up to 2.4.36....
Fedora 9 : kernel-2.6.25.3-18.fc9 (2008-3949)
Update to Linux kernel verion 2.6.25.1, 2.6.25.2, 2.6.25.3: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 Security fixes: CVE-2008-1669 2.6.25.2 - SMP...
CVE-2007-2136
CVE-2007-2136 affects BMC Patrol PerformAgent: a stack-based buffer overflow in the bgs_sdservice.exe component, exploitable by sending crafted XDR data to TCP port 10128. The root cause is improper parsing of XDR data, allowing a remote attacker to corrupt the stack and potentially execute arbit...
ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability
ZDI-07-019: BMC Patrol PerformAgent bgssdservice Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-019.html April 18, 2007 -- CVE ID: CVE-2007-2136 -- Affected Vendor: BMC -- Affected Products: Patrol -- TippingPointTM IPS Customer Protection: TippingPoint IPS...
CVE-2002-2136
CVE-2002-2136 is rejected/not used; duplicate of CVE-2002-1590.
CVE-2005-2136
The CVE-2005-2136 entry concerns Raritan Dominion SX (DSX) Console Servers (DSX16, DSX32, DSX4, DSX8, DSXA-48). The underlying issue is improper file permissions: world-readable /etc/shadow and world-writable /bin/busybox, enabling local users to obtain password hashes and possibly execute arbitr...
CVE-2004-2136
The CVE-2004-2136 entry concerns dm-crypt in the Linux kernel (2.6.x) used on certain filesystems with block sizes of 1024 or greater. The underlying issue is an IV computation weakness in the encryption mode that can allow watermarked files to be detected without decrypting the data. The availab...
CVE-2004-2136
dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...