kernel security and bug fix update

2.6.9-78.0.8.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with...

Gentoo Security Advisory GLSA 200402-06 (Kernel)

The remote host is missing updates announced in advisory GLSA 200402-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel s390 ptrace本地拒绝服务漏洞

CVE ID：CVE-2008-1514 CNCVE ID：CNCVE-20081514 Linux是一款开放源代码的操作系统。 Linuxs390架构运行31位ptrace存在错误，本地攻击者可以利用漏洞使内核出现Panic，导致拒绝服务攻击。 目前没有详细漏洞细节提供。 Linux Kernel 2.6.x 升级到Linux kernel 2.6.27-rc6版本： http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6...

kernel: ptrace: Unprivileged crash on x86_64 %cs corruption

Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...

Linux Kernel x86_64 ptrace Denial Of Service Vulnerability

Linux内核存在拒绝服务漏洞，当进程执行在64位的计算机时。 本地攻击者可以利用这个问题的崩溃和内核拒绝服务的合法用户。 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/20/22 vulnerabilities (USN-625-1)

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

Linux Kernel < 2.4.20 Module Loader Local Root Exploit

No description provided by source. / Linux Kernel Module Loader Local R00t Exploit Up to 2.4.20 By anonymous KuRaK include stdio.h include stdlib.h include signal.h include fcntl.h include errno.h include unistd.h include sys/types.h include sys/stat.h include sys/ptrace.h include sys/wait.h...

USN-625-1: Linux kernel vulnerabilities

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5375)

This kernel update fixes quite a number of security problems : - A remote attacker could crash the IPSec/IPv6 stack by sending a bad ESP packet. This requires the host to be able to receive such packets default filtered by the firewall. CVE-2007-6282 - A problem in SIT IPv6 tunnel handling could ...

Linux Kernel x86_64 ptrace本地内存破坏漏洞

BUGTRAQ ID: 30077 CNCAN ID：CNCAN-2008070709 Linux是一款开放源代码的操作系统。 Linux x8664 ptrace存在内存破坏，本地攻击者可以利用漏洞触发溢出，导致不安全释放结构而使系统崩溃。 目前没有详细漏洞细节提供。 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .5 Linux kernel 2.6.25 Linux kernel 2.6.24 .2 Linux kernel 2.6.24 .1 Linux kernel 2.6.24 -rc5 Linux kernel 2.6.24 -r...

Race condition

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...

CVE-2008-2365

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...

CVE-2008-2365

CVE-2008-2365 describes a race condition in Linux kernel ptrace/utrace support (kernel 2.6.9–2.6.25) used by RHEL4. A local user can cause a denial of service (oops) by issuing a long sequence of PTRACE_ATTACH calls that trigger a conflict between utrace_detach and report_quiescent due to a late ...

CVE-2008-2365

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...

Linux Kernel utrace和ptrace本地拒绝服务漏

BUGTRAQ ID: 29945 CVE ID：CVE-2008-2365 CNCVE ID：CNCVE-20082365 Linux是一款开放源代码的操作系统。 Linux utrace/ptrace挂接和卸载存在竞争条件问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 ptracemayattach包含如下代码： static int ptraceattachstruct taskstruct task ... engine = utraceattachtask, UTRACEATTACHCREATE | UTRACEATTACHEXCLUSIVE |...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0508 Updated kernel packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain...

kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACEATTACH ptrace calls to another user's process that trigger a conflict between...

PT-2008-3849 · Red Hat +1 · Enterprise Linux +13

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux RHEL 4, allows local users to cause a denial of service oops via a long series of PTRACE ATTACH ptrace calls to another user's process that trigger a conflict between utra...

Linux Kernel 2.6.9 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)

Linux Kernel 2.6.9 2.6.25 RHEL 4 - utrace and ptrace Local Denial of Service 1 / source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become...

Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (2)

/ source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become unresponsive, denying service to legitimate users. / / This software is provided...