Slackware 9.0 : 2.4.21 kernels available (SSA:2003-168-01)

Precompiled Linux 2.4.21 kernels and source packages are now available for Slackware 9.0 and -current. These provide an improved version of the ptrace fix that had been applied to 2.4.20 in Slackware 9.0 for example, command line options now appear correctly when root does 'ps ax', and fix a...

Multiple Linux kernel vulnerabilities

DoS with signal handler, another one ptrace privilege escalation vulnerability...

CVE-2005-1763

Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory...

CVE-2005-0756

CVE-2005-0756 affects Linux kernel 2.6.8.1 on the amd64 platform, where ptrace() does not properly verify addresses, allowing a local attacker to crash the kernel (denial of service). The issue is reiterated across multiple advisories (Red Hat/CentOS RHSA-2005:514, Debian DSA-922/DSA-921, etc.), ...

CVE-2005-0756

ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service kernel crash...

CVE-2005-1763

CVE-2005-1763 describes a buffer overflow in the ptrace system call for 64-bit Linux kernels, enabling local users to write into kernel memory. The issue affects 64-bit architectures and is reported in multiple advisories. Public details confirm a local-exploit scenario with kernel memory impact ...

CVE-2005-1763

Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory...

USN-137-1: Linux kernel vulnerabilities

Alexander Nyberg discovered that ptrace insufficiently validated addresses on the amd64 platform so that it was possible to set an invalid segment base. A local attacker could exploit this to crash the kernel. This does not affect the i386 and powerpc platforms in any way. CAN-2005-0756 Chris...

security flaw

The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service crash via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761...

CVE-2005-0756

ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service kernel crash...

CVE-2005-0756

ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service kernel crash...

Multiple Linux kernel vulnerabilities

DoS and possible code execution on invalid mmap arguments, ptrace problem rase again on amd64 platform...

HP-UX PHKL_27180 : HP-UX running ptrace(2), Local Denial of Service (DoS) (HPSBUX00206 SSRT071397 rev.2)

s700800 11.00 Corrected reference to thread register state : Improper use of ptrace2 could panic the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHKL27180. The text itself is copyright C...

HP-UX PHKL_27179 : HP-UX running ptrace(2), Local Denial of Service (DoS) (HPSBUX00206 SSRT071397 rev.2)

s700800 11.11 Corrected reference to thread register state : Improper use of ptrace2 could panic the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHKL27179. The text itself is copyright C...

HP-UX PHKL_27536 : HP-UX running ptrace(2), Local Denial of Service (DoS) (HPSBUX00206 SSRT071397 rev.2)

s700800 11.04 VVOS Corrected ref to thread reg state : Improper use of ptrace2 could panic the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHKL27536. The text itself is copyright C Hewlett-Packard...

CVE-2004-0997

Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors...

Debian DSA-276-1 : linux-kernel-s390 - local privilege escalation

The kernel module loader in Linux 2.2 and Linux 2.4 kernels has a flaw in ptrace. This hole allows local users to obtain root privileges by using ptrace to attach to a child process that is spawned by the kernel. Remote exploitation of this hole is not possible. This advisory only covers kernel...

CVE-2004-0001

The CVE-2004-0001 issue is described across multiple advisories as a local privilege escalation in the AMD64 Linux kernel ptrace emulation, due to incorrect eflags handling in 32-bit ptrace. Affected: AMD64 Linux kernels; root cause: eflags processing in the ptrace emulation path; impact: local u...

GLSA-200402-06 : Updated kernel packages fix the AMD64 ptrace vulnerability

The remote host is affected by the vulnerability described in GLSA-200402-06 Updated kernel packages fix the AMD64 ptrace vulnerability A vulnerability has been discovered by Andi Kleen in the ptrace emulation code for AMD64 platforms when eflags are processed, allowing a local user to obtain...

Mandrake Linux Security Advisory : kernel (MDKSA-2004:015)

Paul Staretz discovered a flaw in return value checking in the mremap function in the Linux kernel, versions 2.4.24 and previous that could allow a local user to obtain root privileges. A vulnerability was found in the R128 DRI driver by Alan Cox. This could allow local privilege escalation. A fl...