Virtuozzo 7 : readykernel-patch (VZA-2018-026)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - It was discovered that nfnlcthelperlist structure was accessible to any user with CAPNETADMIN capability in a networ...

Virtuozzo 7 : readykernel-patch (VZA-2018-024)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - It was discovered that nfnlcthelperlist structure was accessible to any user with CAPNETADMIN capability in a networ...

Kernel security update: Virtuozzo ReadyKernel patch 49.0 for Virtuozzo 7.0.7 and 7.0.7 HF2

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo 7.0 kernels 3.10.0-693.17.1.vz7.43.10 7.0.7 and 3.10.0-693.21.1.vz7.46.7 7.0.7 HF2. Vulnerability id: CVE-2017-17448 It was discovered that nfnlcthelperlist structure was...

kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure

The net/netfilter/nfnetlinkcthelper.c function in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations. This allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net...

CVE-2017-15115

A vulnerability was found in the Linux kernel when peeling off an association to the socket in another network namespace. All transports in this association are not to be rehashed and keep using the old key in hashtable, thus removing transports from hashtable when closing the socket, all...

Virtuozzo 7 : kernel / kernel-abi-whitelists / kernel-debug / etc (VZLSA-2017-0086)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

openSUSE Security Update : lxc (openSUSE-2017-463)

This update for lxc fixes the following issues : This security issue was fixed : CVE-2017-5985: lxc-user-nic allowed access to network namespace over which the caller did not hold privilege boo1028264. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

UBUNTU-CVE-2017-5985

lxc-user-nic in Linux Containers LXC allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check...

kernel: compat IPT_SO_SET_REPLACE setsockopt

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled wit...

kernel: compat IPT_SO_SET_REPLACE setsockopt

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled wit...

CVE-2016-4805

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

CVE-2016-4805

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

Design/Logic Flaw

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

CVE-2016-4805

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

UBUNTU-CVE-2016-4805

Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and system crash, or spinlock or possibly have unspecified other impact by removing a network namespace, related to the...

Linux kernel memory misreference vulnerability (CNVD-2016-03350)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A memory misreference vulnerability exists in the Linux kernel version 4.4 in the pppunregisterchannel, which originates when a program deletes the network namespace and the...

PT-2016-6152 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.2 Description: A use-after-free issue exists, allowing local users to cause a denial of service, potentially resulting in memory corruption, system crash, or spinlock. This issue is related to the removal of...

CVE-2009-1360

The inet6checkestablished function in net/ipv6/inet6hashtables.c in the Linux kernel before 2.6.29, when Network Namespace Support aka NETNS is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via vectors involving IPv6 packets...

Linux Kernel 2.6.35 - Network Namespace Remote Denial of Service

Linux Kernel 2.6.35 - Network Namespace Remote Denial of Service source: https://www.securityfocus.com/bid/50938/info The Linux kernel is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an out-of-memory error in certain linux applications, resulting ...

CVE-2011-2189

net/core/netnamespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service memory consumption via requests to a daemon that requires a separate namespace...