SuSE 10 Security Update : multipath-tools (ZYPP Patch Number 6083)

Default permissions on the multipathd socket file were to generous and allowed any user to connect. CVE-2009-0115 This update also contains the following fixes : - Error checking in VECTORXXX defines. bnc469269 - Correct definition of dbgmalloc - Double free on path release - Use noflush for...

RHEL 4 : kernel (RHSA-2009:1438)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2009-2857

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service deadlock and system halt via vectors involving mmap and write operations on...

CVE-2009-2857

CVE-2009-2857 affects Sun Solaris 8–10 and OpenSolaris prior to snv_103. The kernel mishandles the interaction between the filesystem and virtual-memory subsystems, allowing local users to trigger a deadlock and system halt by performing mmap and write operations on the same file. Impact is a loc...

CVE-2009-2857

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service deadlock and system halt via vectors involving mmap and write operations on...

kernel: do_coredump() vs ptrace_start() deadlock

The ptracestart function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the docoredump function, which allows local users to cause a denial of service deadlock via vectors involving the ptrace system call and a coredumping thread...

bind security update

CentOS Errata and Security Advisory CESA-2009:1180 Updated bind packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BI...

RedHat Security Advisory RHSA-2009:1157

The remote host is missing updates announced in advisory RHSA-2009:1157. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. Security fixes: a flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interfa...

bind security and bug fix update

20:9.2.4-30.4 - security fix for remote DoS CVE-2009-0696, 514292 20:9.2.4-30.3 - fix potential deadlock on socket's control FDs 512668...

kernel: splice local denial of service

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service prevention of file creation and removal via a series of splice...

CVE-2009-2387

The CVE-2009-2387 affects Sun OpenSolaris (SNV 49–109) under the proc filesystem. The issue is an unspecified vulnerability leading to local denial of service (deadlock/panic) related to the ldt_rewrite_syscall function. Public details in the provided documents do not specify affected product ver...

CVE-2009-2387

Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv49 through snv109 allows local users to cause a denial of service deadlock and panic via unknown vectors, related to the ldtrewritesyscall function...

Linux kernel multiple security vulnerabilities

RTL8169 driver DoS, deadlock in inode processing code...

Design/Logic Flaw

The ptracestart function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the docoredump function, which allows local users to cause a denial of service deadlock via vectors involving the ptrace system call and a coredumping thread...

CVE-2009-1388

CVE-2009-1388 affects the Linux kernel 2.6.18, where the ptrace_start function does not properly handle simultaneous execution with do_coredump, enabling local users to trigger a deadlock (DoS) via ptrace and a coredumping thread. The connected MiracleLinux doc explicitly lists CVE-2009-1388 amon...

PT-2009-3904 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.18 Description: The issue arises from the ptrace start function in kernel/ptrace.c, which does not properly handle simultaneous execution of the do coredump function. This allows local users to cause a denial of servi...

Design/Logic Flaw

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service prevention of file creation and removal via a series of splice...

CentOS 4 : kernel (CESA-2009:0459)

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

HP-UX Update for Filesystem Deadlock HPSBUX00178

Check for the Version of Filesystem Deadlock OpenVAS Vulnerability Test HP-UX Update for Filesystem Deadlock HPSBUX00178 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...