CVE-2006-0457

Race condition in the 1 addkey, 2 requestkey, and 3 keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service crash or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies t...

CVE-2006-0380

A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory...

CVE-2006-0380

FreeBSD CVE-2006-0380 (and CVE-2006-0379) affects 5.4-STABLE and 6.0 kernels. A logic error in computing a buffer length can copy too much data to userland, potentially disclosing portions of kernel memory. Impact is local memory disclosure; no workaround is listed in the advisory. Mitigation: up...

CVE-2006-0145

The CVE-2006-0145 entry concerns the kernfs_xread function in kernfs for NetBSD (versions 1.6–2.1) and OpenBSD 3.8. The issue is improper validation of file offsets against negative 32-bit values that occur due to truncation, enabling local users to read arbitrary kernel memory and potentially ga...

security flaw

The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...

CVE-2005-2492

The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...

CVE-2005-2492

The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...

CVE-2005-2492

CVE-2005-2492 affects the Linux kernel 2.6 series prior to 2.6.13.1. The raw_sendmsg function can be exploited by a local user to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input. Documented in multiple advisories (e.g., Mandriva MDKSA-2005:235; SU...

CVE-2004-2302

CVE-2004-2302 is a race condition in the Linux kernel’s sysfs_read_file and sysfs_write_file, present in 2.6.10 and earlier. It can let local users read kernel memory and cause a denial of service (crash) by exploiting large offsets in sysfs files. Public advisories (e.g., Debian DSA-922-1) docum...

RHEL 2.1 : dhcpcd (RHSA-2005:603)

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

dhcpcd security update

CentOS Errata and Security Advisory CESA-2005:603-01 An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of...

Moderate: Red Hat Security Advisory: dhcpcd security update

An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

DEBIAN-CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

Low: Red Hat Security Advisory: glibc security update

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. It was discovered that the use of LDDEBUG...

CVE-2005-0530

CVE-2005-0530 is a signedness error in the copy_from_read_buf function in n_tty.c of the Linux kernel (affected: 2.6.10 and 2.6.11rc1) that allows local users to read kernel memory via a negative argument. The vulnerability is documented across multiple advisories, including Red Hat (RHSA-2005:36...

CVE-2004-2607

A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...

CVE-2004-0569

The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service system crash via a malicious message, possibly related to improper length values...