CVE-2016-2847

CVE-2016-2847 affects the Linux kernel, where fs/pipe.c does not cap unread data in pipes, enabling local users to cause memory exhaustion and a denial of service. The description and connected sources confirm the vulnerability lies in the per-user pipe data handling and that the risk is local Do...

CVE-2016-2847

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service memory consumption by creating many pipes with non-default sizes...

CVE-2015-1339

Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or possibly have unspecified other impact by opening /dev/cuse many times...

CVE-2016-2847: Undefined Security Weakness

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service memory consumption by creating many pipes with non-default sizes...

CVE-2015-1339: Undefined Security Weakness

Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or possibly have unspecified other impact by opening /dev/cuse many times...

CVE-2016-0774: Improper Input Validation

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

PT-2016-7812

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.1 Description The issue is related to multiple memory leaks in error paths in the fs/xfs/xfs attr list.c file. This can be exploited by local users through crafted XFS filesystem operations, leading to a deni...

Fedora Update for nodejs-fs-ext FEDORA-2016-6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: nodejs-fs-ext-0.5.0-9.fc24

Extensions to core 'fs' module for Node.js...

CVE-2015-1805

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...

Bus Simulator 2016 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bus Simulator 2016 published at the 'play' market has multiple vulnerabilities...

kernel-uek security update

kernel-uek 4.1.12-32.2.3 - rebuild bumping release 4.1.12-32.2.2 - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 22997978 CVE-2016-3157 - fs/hugetlbfs/inode.c: fix bugs in hugetlbvmtruncatelist Mike Kravetz Orabug: 22667863...

kernel security, bug fix, and enhancement update

2.6.32-573.22.1 - mm always decrement anonvma degree when the vma list is empty Jerome Marchand 1318364 1309898 2.6.32-573.21.1 - fs pipe: fix offset and len mismatch on pipeiovcopytouser failure Seth Jennings 1310148 1302223 CVE-2016-0774 - fs gfs2: Add missing else in transaddmeta/data Robert S...

PT-2020-2425

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.4.x through 4.4.220 Linux kernel versions 4.9.x through 4.9.220 Linux kernel versions 4.14.x through 4.14.177 Linux kernel versions 4.19.x through 4.19.118 Linux kernel versions 5.x through 5.2 Description A pivot root...

kernel security update

kernel 2.6.18-409.0.0.0.1 - netfront fix ring buffer index go back led vif stop orabug 18272251 - net fix tcptrimhead James Li orabug 14512145, 19219078 - ocfs2: dlm: fix recovery hung Junxiao Bi orabug 13956772 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add...

kernel security update

kernel 2.6.18-409 - fs ext4: limit group search loop for non-extent files Lukas Czerner 1301100 - fb vm: convert fbmmap to vmiomapmemory helper Jacob Tanenbaum 1035240 CVE-2013-2596 - s390 add dummy ioremappfnrange to asm-s390/pgtable.h Jacob Tanenbaum 1035240 CVE-2013-2596 - mm vm: add...

CVE-2016-0823

The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721...

CVE-2016-0823: Exposure of Sensitive Information to an Unauthorized Actor

The pagemapopen function in fs/proc/taskmmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721...

PT-2017-7774

Name of the Vulnerable Software and Affected Versions systemd versions prior to v229 Description A flaw in the systemd timers feature caused world-writable suid files to be created, allowing local attackers to escalate their privileges to root. The issue is related to the /src/basic/fs-util.c fil...

Fedora 21 : lxc-1.0.7-4.fc21 (2015-ebfe46536f)

lxc-1.0.7-4.fc21 - Add some patches: - Allow building on EPEL6. - Fix boot-order similar to rhbz1263612. - Prevent lxc-top crash rhbz1152384 . - Set lxc.kmsg = 0 in the config rhbz1204389 . - Use 'overlay' as fs name when needed rhbz1217516 . - Add dependency on rsync rhbz1177981 . Note that...