914 matches found
UBUNTU-CVE-2012-6647
The futexwaitrequeuepi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted...
PT-2014-2415 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.5.1 Description: The issue is related to the futex wait requeue pi function in the Linux kernel, which does not properly validate futex addresses. This can be exploited by local users to cause a denial of...
Android 'Towelroot' Futex Requeue Kernel Exploit
This module exploits a bug in futexrequeue in the Linux kernel, using similar techniques employed by the towelroot exploit. Any Android device with a kernel built before June 2014 is likely to be vulnerable. Module Options msf use exploit/android/local/futex/requeue msf undefinedrequeue show...
Oracle Linux 5 : kernel (ELSA-2013-1034-1)
From Red Hat Security Advisory 2013:1034 : Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS...
Oracle Linux 5 : kernel (ELSA-2010-0839)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0839 advisory. - net rds: fix local privilege escalation Eugene Teo 642897 642898 CVE-2010-3904 - misc futex: replace LOCKPREFIX in futex.h Peter Zijlstra 633175 6331...
Oracle Linux 5 : kernel (ELSA-2010-0504)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0504 advisory. - fs gfs2: fix permissions checking for setflags ioctl Steven Whitehouse 595580 595399 CVE-2010-1641 - misc keys: do not find already freed keyrings...
RedHat Update for kernel RHSA-2013:1034-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2013:1034-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20130710)
This update fixes the following security issues : - Information leaks in the Linux kernel could allow a local, unprivileged user to leak kernel memory to user-space. CVE-2012-6544, CVE-2012-6545, CVE-2013-3222, CVE-2013-3224, CVE-2013-3231, CVE-2013-3235, Low - An information leak was found in th...
kernel security update
CentOS Errata and Security Advisory CESA-2013:1034 Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring Syst...
Low: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 5 : kernel (RHSA-2013:1034)
Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
USN-1653-1: Linux kernel (EC2) vulnerability
Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. CVE-2012-4565 Mathias Krause discovered an information leak in the Linux kernel's TUN/TAP device driver. A local user could exploit this...
CVE-2012-0028
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process...
CVE-2012-0028: Undefined Security Weakness
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2393)
This kernel update fixes the following security problems : - A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. 186226. CVE-2006-4145 - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable...
kernel: futex: clear robust_list on execve
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process...
RHEL 5 : kernel (RHSA-2012:0107)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0107 advisory. - kernel: ext4: ext4extinsertextent kernel oops CVE-2011-3638 - kernel: jbd2: unmapped buffer with Unwritten or Delay flags set can lead to...
kernel: futex: clear robust_list on execve
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process...
PT-2012-2251 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.28 Description: The issue is related to the robust futex implementation in the Linux kernel, which does not properly handle processes that make exec system calls. This can be exploited by local users to caus...
CVE-2010-3086
include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service panic via an invalid application that triggers a page fault...