CVE-2011-3345

CVE-2011-3345 affects the OpenFabrics Enterprise Distribution (OFED) ib_sdp driver (InfiniBand) in the ibsdp module. The root cause is improper handling of certain non-array variables in sdp_proc.c, causing stack memory corruption that can crash the system when a local user reads /proc/net/sdpsta...

USN-1202-1 : linux-ti-omap4 vulnerabilities

Dan Rosenberg discovered that several network ioctls did not clear kernel memory correctly. A local user could exploit this to read kernel stack memory, leading to a loss of privacy. CVE-2010-3296, CVE-2010-3297 Brad Spengler discovered that stack memory for new a process was not correctly...

kernel: DoS (crash) due slab corruption in inotify_init1 (incomplete fix for CVE-2010-4250)

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service system crash via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250...

CVE-2011-2723

The skbgroheaderslow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload GRO is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service system crash via crafted network traffic...

CVE-2011-2723

The skbgroheaderslow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload GRO is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service system crash via crafted network traffic...

PT-2011-4044 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39.4 Description: The issue allows remote attackers to cause a denial of service system crash via crafted network traffic. This is due to the skb gro header slow function resetting certain fields in incorrec...

CVE-2011-2723

The skbgroheaderslow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload GRO is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service system crash via crafted network traffic...

KnFTPd v1.0.0 Multiple Command Remote Buffer Overflow

KnFTPd FTP Server v1.0.0 is vulnerable to a buffer overflow caused by improper bounds checking. By sending an overly long request to Multpile FTP commandUSER,PASS,REIN,QUIT,PORT,PASV,TYPE,STRU,MODE,RETR,STOR,...

kernel: gfs2: make sure fallocate bytes is a multiple of blksize

The gfs2fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service BUG and system crash by arranging for all resource groups to have too little...

CentOS Update for kernel CESA-2009:1670 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1670 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CVE-2011-2689

The gfs2fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service BUG and system crash by arranging for all resource groups to have too little...

CVE-2011-1079

The bnepsockioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service BUG and...

Freefloat FTP Server POST Auth 'ABOR' Command Buffer Overflow Vulnerability

This host is running Freefloat FTP Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfreefloatftpaborcmdbofvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Freefloat FTP Server POST Auth 'ABOR' Command Buffer Overflow Vulnerability Authors: Veerendra G.G Copyrigh...

PT-2011-4030 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0-rc1 Description: The issue allows local users to cause a denial of service, resulting in a system crash, by arranging for all resource groups to have too little free space. This is due to the gfs2 fallocate...

Freefloat FTP Server POST Auth 'REST' Command Buffer Overflow Vulnerability

Freefloat FTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1167-1: Linux kernel vulnerabilities

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. CVE-2011-1927 Goldwyn Rodrigues discovered that the OCFS2 filesystem did not correctly clear memory when writing certain file...

Code injection

The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service system crash via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK...

Code injection

The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service system crash via vectors involving WebGL and 1 shader programs or 2 complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to...

CVE-2011-2604

The CVE-2011-2604 entry affects Intel G41 driver 6.14.10.5355 on Windows XP SP3. A crafted web page visited by Google Chrome or Mozilla Firefox can cause a denial of service (system crash), as demonstrated by lots-of-polys-example.html in the Khronos WebGL SDK. No additional remediation details a...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...