CVE-2009-1238

The CVE relates to a race condition in the HFS vfs sysctl interface of the XNU kernel (affected: older Apple Mac OS X 10.5.6 and earlier; specific build 1228.8.20 and earlier). The flaw arises from lack of mutex locking for an unspecified global variable, allowing local users to trigger kernel me...

CVE-2009-1238

Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service kernel memory corruption by simultaneously executing the same HFSSETPKGEXTENSIONS code path in multiple threads, which is problematic...

CVE-2009-1235

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving...

CVE-2009-1235: Undefined Security Weakness

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving...

CVE-2009-1237: Undefined Security Weakness

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service kernel memory consumption via a crafted 1 SYSaddprofil or 2 SYSmacgetfsstat system call...

CVE-2009-1238: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service kernel memory corruption by simultaneously executing the same HFSSETPKGEXTENSIONS code path in multiple threads, which is problematic...

CVE-2009-1041

The ktimer feature sys/kern/kerntime.c in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value...

Memory corruption

The ktimer feature sys/kern/kerntime.c in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value...

CVE-2009-0787

The ecryptfswritemetadatatocontents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory...

CVE-2009-0787

The ecryptfswritemetadatatocontents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory...

CVE-2009-0787: Undefined Security Weakness

The ecryptfswritemetadatatocontents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory...

CVE-2009-1041

The ktimer feature sys/kern/kerntime.c in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value...

CVE-2009-1041

CVE-2009-1041 affects FreeBSD 7.x (7.0, 7.1, 7.2). The ktimer feature in kern_time.c permits an out-of-bounds timer value, enabling an unprivileged local user to overwrite arbitrary kernel memory, potentially changing UID or escaping jail. The FreeBSD advisory FreeBSD-SA-09:06.ktimer documents th...

Mac OS X xnu <= 1228.3.13 (profil) Kernel Memory Leak/DoS PoC

No description provided by source. / xnu-profil-leak.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 local kernel memory leak/DoS POC by mu-b - Sat 16 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386 -...

CVE-2009-1041: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ktimer feature sys/kern/kerntime.c in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value...

Mac OS X xnu <= 1228.3.13 (macfsstat) Local Kernel Memory Leak/DoS

No description provided by source. / xnu-macfsstat-leak.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 local kernel memory leak/DoS POC by mu-b - Sun 13 Apr 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.2 xnu-1228.3.131/RELEASEI386 -...

Mac OS X xnu <= 1228.3.13 (profil) Kernel Memory Leak/DoS PoC

Exploit for macOS platform in category dos / poc ============================================================= Mac OS X xnu Apple MACOS X xnu include include include include include / profil defines / define PROFILLEAKNUM 65536 128 int main int argc, char argv char buf1024; int i, n; printf "Appl...

Ubuntu: Security Advisory (USN-509-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-source-2.6.17/20/22 vulnerability USN-577-1

Ubuntu Update for Linux kernel vulnerabilities USN-577-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5771.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17/20/22 vulnerability USN-577-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-637-1

Ubuntu Update for Linux kernel vulnerabilities USN-637-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6371.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-637-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networ...