7793 matches found
Debian DSA-466-1 : linux-kernel-2.2.10-powerpc-apus - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-456-1 : linux-kernel-2.2.19-arm - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-441-1 : linux-kernel-2.4.17-mips+mipsel - missing function return value check
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to missing function return value check of internal functions a local attacker can gain root privileges. %NASLMINLEVEL 70300 C...
Debian DSA-439-1 : linux-kernel-2.4.16-arm - several vulnerabilities
Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the ARM kernel for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2003-0961 : An integer...
Debian DSA-514-1 : kernel-image-sparc-2.2 - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
Debian DSA-453-1 : linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...
GLSA-200403-02 : Linux kernel do_mremap local privilege escalation vulnerability
The remote host is affected by the vulnerability described in GLSA-200403-02 Linux kernel domremap local privilege escalation vulnerability The memory subsystem allows for shrinking, growing, and moving of chunks of memory along any of the allocated memory areas which the kernel possesses. To...
GLSA-200401-01 : Linux kernel do_mremap() local privilege escalation vulnerability
The remote host is affected by the vulnerability described in GLSA-200401-01 Linux kernel domremap local privilege escalation vulnerability The memory subsystem allows for shrinking, growing, and moving of chunks of memory along any of the allocated memory areas which the kernel possesses. A...
Qt - .bmp Parsing Bug Heap Overflow
Qt - .bmp Parsing Bug Heap Overflow / heap overflow exploit for qt bmp parsing bug infamous42md AT hotpop DOT com shouts to mitakeet, MB, and peeps @hackaholic ok, pretty standard heap overflow here. we spill across our chunk and overwrite the boundary tag for next chunk. the only problems i had...
SuSE-SA:2004:005: Linux Kernel
The remote host is missing the patch for the advisory SuSE-SA:2004:005 Linux Kernel. Another bug in the Kernel's domremap function, which is unrelated to the bug fixed in SuSE-SA:2004:001, was found by Paul Starzetz. The domremap function of the Linux Kernel is used to manage Virtual Memory Areas...
SuSE-SA:2004:001: Linux Kernel
The remote host is missing the patch for the advisory SuSE-SA:2004:001 Linux Kernel. The domremap function of the Linux Kernel is used to manage move, resize Virtual Memory Areas VMAs. By exploiting an incorrect bounds check in domremap during the remapping of memory it is possible to create a VM...
[SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc)
-------------------------------------------------------------------------- Debian Security Advisory DSA 514-1 [email protected] http://www.debian.org/security/ Martin Schulze June 4th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 514-1] New Linux 2.2.20 packages fix local root exploit (sparc)
-------------------------------------------------------------------------- Debian Security Advisory DSA 514-1 [email protected] http://www.debian.org/security/ Martin Schulze June 4th, 2004 http://www.debian.org/security/faq -...
DSA-514 kernel-image-sparc-2.2 - failing function and TLB flush
Bulletin has no description...
Microsoft Windows ASN.1 library contains a memory management vulnerability
Overview Microsoft's ASN.1 library contains a memory management error that could be exploited by a remote attacker to cause a denial-of-service situation, or execute arbitrary code. Description Microsoft's ASN.1 library contains a memory management error, potentially a "double-free" condition. By...
[SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa)
-------------------------------------------------------------------------- Debian Security Advisory DSA 475-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2004 http://www.debian.org/security/faq -...
DSA-470 linux-kernel-2.4.17-hppa - several vulnerabilities
Bulletin has no description...
[SECURITY] [DSA 466-1] New Linux 2.2.10 packages fix local root exploit (powerpc/apus)
-------------------------------------------------------------------------- Debian Security Advisory DSA 466-1 [email protected] http://www.debian.org/security/ Martin Schulze March 18th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 466-1] New Linux 2.2.10 packages fix local root exploit (powerpc/apus)
-------------------------------------------------------------------------- Debian Security Advisory DSA 466-1 [email protected] http://www.debian.org/security/ Martin Schulze March 18th, 2004 http://www.debian.org/security/faq -...