CVE-2009-2819

AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service memory corruption and system crash via unspecified vectors...

CVE-2009-2819

CVE-2009-2819 affects Apple Mac OS X 10.5.8 where the AFP Client has multiple memory‑corruption vulnerabilities. Connecting to a malicious AFP server can lead to remote arbitrary code execution or a denial of service (system crash). The issue is documented in multiple feeds, including the SSV lis...

Race condition

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

CVE-2009-3547

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

CVE-2009-3547

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3640

The updatecr8intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller APIC, which allows local users to cause a denial of service NULL pointer dereference and system...

CVE-2009-3640

CVE-2009-3640 affects the Linux kernel KVM component (arch/x86/kvm/x86.c). The update_cr8_intercept function does not properly handle missing APIC, causing a local denial of service via a NULL pointer dereference and, potentially, privilege escalation through kvm_vcpu_ioctl. Affected: kernels bef...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:289)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easi...

Design/Logic Flaw

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

CVE-2009-3613

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

Code injection

Unspecified vulnerability in ia32el aka the IA 32 emulation functionality before 70427022-0.4.2 in SUSE Linux Enterprise SLE 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service system crash via a 32-bit x86 application...

CVE-2009-2707

Unspecified vulnerability in ia32el aka the IA 32 emulation functionality before 70427022-0.4.2 in SUSE Linux Enterprise SLE 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service system crash via a 32-bit x86 application...

CVE-2009-2707

The CVE-2009-2707 issue affects SUSE Linux Enterprise Server 10 SP2 on Itanium IA64, where the ia32el IA32 emulation layer can be leveraged by a local 32-bit x86 application to cause a kernel crash (DoS). The vulnerability is described as an unspecified defect in ia32el prior to version 7042_7022...

Linux Kernel 2.6.31 - perf_counter_open() Local Buffer Overflow

Linux Kernel 2.6.31 - perfcounteropen Local Buffer Overflow source: https://www.securityfocus.com/bid/36423/info The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers may be able to exploit th...

CVE-2008-7224

Buffer overflow in entitycache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service crash via a crafted link...

Microsoft Windows RDP DoS

Creating multiple RDP connection at the same time causes system to crash...

CVE-2009-3103

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...