CVE-2010-2803

CVE-2010-2803 affects the Linux kernel DRM subsystem. The drm_ioctl path in drivers/gpu/drm/drm_drv.c allows a local user to request a large memory allocation and may leak kernel memory contents. Affected trees/versions include 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2...

Ubuntu Update for linux regression USN-974-2

Ubuntu Update for Linux kernel vulnerabilities USN-974-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9742.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for linux regression USN-974-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.ne...

Ubuntu: Security Advisory (USN-974-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS : linux regression (USN-974-2)

USN-974-1 fixed vulnerabilities in the Linux kernel. The fixes for CVE-2010-2240 caused failures for Xen hosts. This update fixes the problem. We apologize for the inconvenience. Gael Delalleu, Rafal Wojtczuk, and Brad Spengler discovered that the memory manager did not properly handle when...

Linux kernel 2.6.x DRM模块IOCTL请求信息泄露漏洞

BUGTRAQ ID: 42577 CVE ID: CVE-2010-2803 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/gpu/drm/drmdrv.c驱动中的drmioctl函数没有正确地清除内核内存便将其拷贝到了用户空间，这允许本地用户通过发送特制的IOCTL请求泄露敏感信息。成功利用这个漏洞要求用户又有对DRI路径的读写访问权限。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Debian DSA-2094-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4895 Kyle Bader reported an issue in the tty subsystem that allows local...

Ubuntu Update for Linux kernel vulnerabilities USN-974-1

Ubuntu Update for Linux kernel vulnerabilities USN-974-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9741.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-974-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-2803

The drmioctl function in drivers/gpu/drm/drmdrv.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-2803. Reason: This candidate is a reservation duplicate of CVE-2010-2803. Notes: All CVE users should reference CVE-2010-2803 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2010-3016

CVE-2010-3016 is a reservation duplicate of CVE-2010-2803; not an active vulnerability entry.

Mac OS X Security Update 2009-005

The remote host is missing Security Update 2009-005. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SLES10: Security update for MozillaFirefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the...

CVE-2009-2803

CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a file with a crafted resource fork...

CVE-2009-2803

Apple Mac OS X 10.4.11 and 10.5.8 are affected by CVE-2009-2803 in CarbonCore, where a crafted resource fork in a file can cause memory corruption and potentially arbitrary code execution or a denial of service. Connected sources (OpenVAS/Nessus) map this to Security Update 2009-005, which patche...

CVE-2009-2803

CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a file with a crafted resource fork...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

Mandriva Linux Security Advisory : mozilla-firefox (MDVSA-2008:136)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.15 CVE-2008-2798, CVE-2008-2799, CVE-2008-2800, CVE-2008-2801, CVE-2008-2802, CVE-2008-2803, CVE-2008-2805, CVE-2008-2807, CVE-2008-2808, CVE-2008-2809, CVE-2008-2811. This update...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:155-1)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.16 CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-2785, CVE-2008-2798, CVE-2008-2799, CVE-2008-2802, CVE-2008-2803, CVE-2008-2807,...

Mandriva Update for mozilla-firefox MDVSA-2008:136 (mozilla-firefox)

Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDVSA-2008:136 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Mandriva Update for mozilla-thunderbird MDVSA-2008:155-1 (mozilla-thunderbird)

Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2008:155-1 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...