CVE-2010-2960

The keyctlsessiontoparent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via...

TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products - Cisco Systems

Multiple Cisco products are affected by denial of service DoS vulnerabilities that manipulate the state of Transmission Control Protocol TCP connections. By manipulating the state of a TCP connection, an attacker could force the TCP connection to remain in a long-lived state, possibly indefinitel...

SuSE9 Security Update : Linux kernel (YOU Patch Number 12636)

This update fixes various security issues and some bugs in the SUSE Linux Enterprise 9 kernel. The following security issues were fixed : - A crafted NFS write request might have caused a buffer overwrite, potentially causing a kernel crash. CVE-2010-2521 - The x8664 copytouser implementation mig...

CVE-2010-3015

Integer overflow in the ext4extgetblocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service BUG and system crash via a write operation on the last block of a large file, followed by a sync operation...

Integer overflow

Integer overflow in the ext4extgetblocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service BUG and system crash via a write operation on the last block of a large file, followed by a sync operation...

CVE-2010-3015

Integer overflow in the ext4extgetblocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service BUG and system crash via a write operation on the last block of a large file, followed by a sync operation...

CVE-2010-3015

Integer overflow in the ext4extgetblocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service BUG and system crash via a write operation on the last block of a large file, followed by a sync operation...

CVE-2010-2959

Integer overflow in net/can/bcm.c in the Controller Area Network CAN implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service system crash via...

kernel: keyrings: find_keyring_by_name() can gain the freed keyring

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

Linux Kernel <= 2.6.33.3 SCTP INIT Remote DoS

Exploit for linux platform in category dos / poc ============================================= Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and...

Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service

From: http://jon.oberheide.org/files/sctp-boom.py !/usr/bin/env python ''' sctp-boom.py Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and earlie...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:088)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The ATI Rage 128 aka r128 driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine CCE state initialization, which allows local users to cause a denial of service NULL pointer...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:066)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The gfs2lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfslock function in the Linux kernel on Red Hat Enterprise Linux RHEL 5 and 6, does not properly remove POSIX locks on files that are...

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges or cause a denial of service system crash by using a large number of calls to the NtUserCheckAccessForIntegrityLevel function to trigge...

[Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability

Title: Kil13r-SA-20100513 Adobe Flash Player 10.0 Denial Of Service Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Local Timeline: 2008/10/22 - Discover 2009/07/19 - Vendor notification 2009/07/21 - Vendor response 2009/07/25 - Contact vendor 2009/07/28 - Vendor response...

Race condition

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

CVE-2010-1437

CVE-2010-1437 is a race condition in the Linux kernel’s keyring handling (find_keyring_by_name in security/keys/keyring.c) affecting version 2.6.34-rc5 and earlier. A local user can exploit this via keyctl session commands that access a dead keyring being deleted by key_cleanup, leading to memory...

CVE-2010-1437

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7011)

This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The bugs fixed include a serious data corruption regression in NFS. The following security issues were fixed : - drivers/net/r8169.c in the r8169 driver in the Linux kernel does not properly...

Microsoft Windows - SMB2 Negotiate Protocol '0x72' Response Denial of Service

!/usr/bin/python === EDIT – this exploit appears to be exactly the same one of one which was already found and fixed notified by Laurent Gaffié, i did not know this but his blog post can be found here: http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html import...