CVE-2004-2302

CVE-2004-2302 is a race condition in the Linux kernel’s sysfs_read_file and sysfs_write_file, present in 2.6.10 and earlier. It can let local users read kernel memory and cause a denial of service (crash) by exploiting large offsets in sysfs files. Public advisories (e.g., Debian DSA-922-1) docum...

RHEL 2.1 : dhcpcd (RHSA-2005:603)

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

dhcpcd security update

CentOS Errata and Security Advisory CESA-2005:603-01 An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of...

Moderate: Red Hat Security Advisory: dhcpcd security update

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

DEBIAN-CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

Low: Red Hat Security Advisory: glibc security update

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. It was discovered that the use of LDDEBUG...

CVE-2005-0530

CVE-2005-0530 is a signedness error in the copy_from_read_buf function in n_tty.c of the Linux kernel (affected: 2.6.10 and 2.6.11rc1) that allows local users to read kernel memory via a negative argument. The vulnerability is documented across multiple advisories, including Red Hat (RHSA-2005:36...

CVE-2004-2607

A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...

CVE-2004-0569

The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service system crash via a malicious message, possibly related to improper length values...

RHEL 3 : squid (RHSA-2004:462)

An updated squid package that fixes a security vulnerability in the NTLM authentication helper is now available. Squid is a full-featured Web proxy cache. An out of bounds memory read bug was found within the NTLM authentication helper routine. If Squid is configured to use the NTLM authenticatio...

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a security vulnerability in the NTLM authentication helper is now available. Squid is a full-featured Web proxy cache. An out of bounds memory read bug was found within the NTLM authentication helper routine. If Squid is configured to use the NTLM authenticatio...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The SNMP dissector in Ethereal releases 0.8.15 through 0.10.4 contained a memory read flaw. On a system where Ethereal is running, a remote attacker could...

PT-2004-1600 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.5 and earlier Description: The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs...

DEBIAN-CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...

PT-2003-1036 · Xfstt · Xfstt

Name of the Vulnerable Software and Affected Versions: xfstt affected versions not specified Description: The issue is related to an off-by-one error in xfstt, allowing remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake. This can lead ...

CVE-2002-1289

The CVE-2002-1289 entry concerns the Microsoft Java implementation used in Internet Explorer. The vulnerability arises in getNativeServices, which creates an instance of com.ms.awt.peer.INativeServices (INativeServices) and does not verify the memory addresses passed to its methods, allowing remo...

CVE-2002-1125

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including 1 asmon, 2 ascpu, 3 bubblemon, 4 wmmon, and 5 wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory...