2928 matches found
Linux Kernel FWD-TSN块远程溢出漏洞
BUGTRAQ ID: 33113 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果Linux接收到了设置有畸形流ID的FWD-TSN块的话，sctp就不会执行有效性检查，这可能导致在覆盖流ID的TSN时出现溢出。 可通过以下代码路径触发这个溢出： sctpdosm - call sctpsfeatfwdtsn - sctpsideeffects - sctpcmdinterpreter - cmd - verb（如SCTPCMDPROCESSFWDTSN） linux-2.6:net/sctp/smsideeffect.c： 1079 / This is the...
Linux Kernel < 2.6.26.4 SCTP Kernel Memory Disclosure Exploit
No description provided by source. / cve-2008-4113.c Linux Kernel 2.6.26.4 SCTP kernel memory disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in t...
Linux Kernel 2.6.26.4 - SCTP Kernel Memory Disclosure
Linux Kernel 2.6.26.4 - SCTP Kernel Memory Disclosure / cve-2008-4113.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp...
Linux Kernel < 2.6.26.4 SCTP Kernel Memory Disclosure Exploit
Exploit for linux platform in category local exploits ============================================================= Linux Kernel include include include include include include ifndef SCTPHMACIDENT define SCTPHMACIDENT 22 endif define DUMPSIZE 2561024 define DUMPFILE "mem.dump" int mainint argc,...
Linux Kernel < 2.6.26.4 - SCTP Kernel Memory Disclosure
/ cve-2008-4113.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4, when the...
kernel security update
CentOS Errata and Security Advisory CESA-2008:1017 Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel...
kernel security and bug fix update
2.6.18-92.1.22.0.1.el5 - net Add entropy support to e1000 and bnx2 John Sobecki orabug 6045759 - net Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - mm shrink zone patch John Sobecki,Chris Mason orabug 6086839 - nfs nfs attribute timeout fix Trond Myklebust orabug 7156607...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...
kernel: sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH
sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service OOPS via an INIT-ACK that states the peer does not support AUTH, which causes the sctpprocessinit function to clean up active transports and triggers the OOPS when the T1-Init timer expires...
Debian DSA-1687-1 : linux-2.6 - denial of service/privilege escalation
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3527 Tavis Ormandy reported a local DoS and potential privilege escalation...
DSA-1687-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
Bulletin has no description...
Debian DSA-1681-1 : linux-2.6.24 - denial of service/privilege escalation
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3528 Eugene Teo reported a local DoS issue in the ext2 and ext3 filesystem...
DSA-1681-1 linux-2.6.24 - several vulnerabilities
Bulletin has no description...
USN-679-1: Linux kernel vulnerabilities
It was discovered that the Xen hypervisor block driver did not correctly validate requests. A user with root privileges in a guest OS could make a malicious IO request with a large number of blocks that would crash the host OS, leading to a denial of service. This only affected Ubuntu 7.10...
USN-659-1: Linux kernel vulnerabilities
It was discovered that the direct-IO subsystem did not correctly validate certain structures. A local attacker could exploit this to cause a system crash, leading to a denial of service. CVE-2007-6716 It was discovered that the disabling of the ZEROPAGE optimization could lead to large memory...
Fedora 9 : kernel-2.6.26.6-79.fc9 (2008-8929)
Update kernel from version 2.6.26.5 to 2.6.26.6: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6 CVE-2008-3831 An IOCTL in the i915 driver was not properly restricted to users with the proper capabilities to use it. CVE-2008-4410 The vmiwriteldtentry function in...
Linux Kernel Stream Control Transmission Protocol Violation Vulnerability
This host has Linux Kernel Stream Control Transmission Protocol SCTP implementation and is prone to Protocol Violation Vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2008-4618
The Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service panic via unspecified vectors, related to...
CVE-2008-4618
The Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service panic via unspecified vectors, related to...
Design/Logic Flaw
The Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows attackers to cause a denial of service panic via unspecified vectors, related to...