USN-618-1: Linux kernel vulnerabilities

It was discovered that the ALSA /proc interface did not write the correct number of bytes when reporting memory allocations. A local attacker might be able to access sensitive kernel memory, leading to a loss of privacy. CVE-2007-4571 Multiple buffer overflows were discovered in the handling of...

Ubuntu 8.04 LTS : linux vulnerabilities (USN-614-1)

It was discovered that PowerPC kernels did not correctly handle reporting certain system details. By requesting a specific set of information, a local attacker could cause a system crash resulting in a denial of service. CVE-2007-6694 A race condition was discovered between dnotify fcntl and clos...

USN-614-1: Linux kernel vulnerabilities

It was discovered that PowerPC kernels did not correctly handle reporting certain system details. By requesting a specific set of information, a local attacker could cause a system crash resulting in a denial of service. CVE-2007-6694 A race condition was discovered between dnotify fcntl and clos...

Fedora 9 : kernel-2.6.25.3-18.fc9 (2008-3949)

Update to Linux kernel verion 2.6.25.1, 2.6.25.2, 2.6.25.3: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 Security fixes: CVE-2008-1669 2.6.25.2 - SMP...

Linux Kernel fcntl_setlk()函数本地竞争条件漏洞

BUGTRAQ ID: 29076 CVECAN ID: CVE-2008-1669 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux kernel没有对fcntl功能应用某些保护机制，本地攻击者可以在SMP系统上利用fcntlsetlk与close调用之间的竞争条件获得对文件描述符表的不正确序列访问，这可能导致拒绝服务的情况。 Linux kernel 2.6.25.2 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit

No description provided by source. / LINUX KERNEL Not tainted VLI EFLAGS: 00010286 2.6.9 EIP is at btsockcreate+0x3d/0x13...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

SUSE-SA:2007:021: kernel

The remote host is missing the patch for the advisory SUSE-SA:2007:021 kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:021 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-2006-4342

The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service deadlock by running the shmat function on an shm at the same time that shmctl is removing that shm IPCRMID, which prevents a spinlock from being unlocked...

CVE-2006-4342

Summary: CVE-2006-4342 affects the Red Hat Enterprise Linux 3 kernel on SMP systems. When a local user calls shmat() to attach IPC shared memory while shmctl() is removing the same shared memory (IPC_RMID), access controls may not be fully cleared before removal, potentially causing a deadlock an...

CVE-2006-4235

Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file...

CVE-2006-4235

The CVE-2006-4235 entry concerns Sony SonicStage Mastering Studio. A buffer overflow in the import project functionality (versions 1.1.00 through 2.2.01) can be triggered by a crafted SMP file, enabling remote code execution. Public references (NVD) confirm the affected product and the vulnerabil...

CVE-2006-4235

Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file...

Linux Kernel 2.6.x - Proc dentry_unused Corruption Local Denial of Service

Linux Kernel 2.6.x - Proc dentryunused Corruption Local Denial of Service source: https://www.securityfocus.com/bid/18183/info The Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a flaw in the 'proc' filesystem. This vulnerability allows local users to cause...

Race condition

Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service crash by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure i...

CVE-2006-2629

Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service crash by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure i...

CVE-2006-2629

Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service crash by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure i...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...

USN-263-1: Linux kernel vulnerabilities

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-263-1)

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...