CVE-2010-4175: Undefined Security Weakness

Integer overflow in the rdscmsgrdmaargs function net/rds/rdma.c in Linux kernel 2.6.35 allows local users to cause a denial of service crash and possibly trigger memory corruption via a crafted Reliable Datagram Sockets RDS request, a different vulnerability than CVE-2010-3865...

CVE-2010-4175

Integer overflow in the rdscmsgrdmaargs function net/rds/rdma.c in Linux kernel 2.6.35 allows local users to cause a denial of service crash and possibly trigger memory corruption via a crafted Reliable Datagram Sockets RDS request, a different vulnerability than CVE-2010-3865...

CVE-2010-3865

Integer overflow in the rdsrdmapages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service crash and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets RDS request, which triggers a buffer overflow...

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service !/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software:...

HP Data Protector Manager v6.11 Remote DoS in RDS Service

Exploit for windows platform in category dos / poc !/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software:...

HP Data Protector Manager RDS DOS

This module causes a remote DOS on HP Data Protector's RDS service. By sending a malformed packet to port 1530, rm32.dll causes RDS to crash due to an enormous size for malloc. Module Options msf use auxiliary/dos/hp/data/protectorrds msf undefinedprotectorrds show actions ...actions... msf...

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service

!/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date: 08/01/2011 Author...

HP Data Protector Manager 6.11 Denial Of Service

!/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date: 08/01/2011 Author...

RHEL 5 : kernel (RHSA-2011:0004)

Updated kernel packages that fix multiple security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

kernel: iovec integer overflow in net/rds/rdma.c

Integer overflow in the rdsrdmapages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service crash and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets RDS request, which triggers a buffer overflow...

kernel security, bug fix, and enhancement update

2.6.18-194.32.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug...

CVE-2010-3904

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...

CVE-2010-3904

CVE-2010-3904 is a Linux kernel flaw in the RDS implementation where rds_page_copy_user does not validate user-space addresses, enabling local privilege escalation via crafted sendmsg/recvmsg calls. Affected: Linux kernels prior to 2.6.36; fixed in later kernel releases (e.g., Red Hat/CentOS advi...

CVE-2010-3904

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...

CVE-2010-3904

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...

CVE-2010-3904

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...

CVE-2010-3904: Improper Validation of Specified Quantity in Input

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...

Linux Kernel RDS实现rds_cmsg_rdma_args()函数本地整数溢出漏洞

BUGTRAQ ID: 44921 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的rdscmsgrdmaargs函数中用户所提供的args-nrlocal值被限制到小于UINTMAX。这个限制并不严格，因为在计算总的iovsize时可能可能会溢出，导致分配过小的sockkmalloc。 本地用户可以通过以很大的计数值调用rdsrdmapages导致崩溃。如果没有出现崩溃，则之后还会出现内存破坏。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RHEL 6 : kernel (RHSA-2010:0842)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Missi...

kernel: RDS sockets local privilege escalation

The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...