CVE-2011-0716

CVE-2011-0716 affects the Linux kernel older than 2.6.38. The vulnerability lies in the br_multicast_add_group function within net/bridge/br_multicast.c, triggered when a specific Ethernet bridge configuration is used. An attacker locally can cause memory corruption and a system crash by sending ...

CVE-2011-4324

The CVE-2011-4324 entry affects the Linux kernel, specifically the NFSv4 implementation. A bug in encode_share_access() within fs/nfs/nfs4xdr.c allows local attackers to cause a denial of service and system crash by using mknod on an NFSv4 filesystem. The vulnerability exists in versions of the k...

PT-2012-1527 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: A double free vulnerability exists in the inotify subsystem of the Linux kernel, allowing local users to cause a denial of service, resulting in a system crash. This issue arises from incorre...

CVE-2011-1023: Undefined Security Weakness

The Reliable Datagram Sockets RDS subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service BUGON and system crash via vectors involving 1 a loopback aka loop transmit operation or 2 an InfiniBand aka ib...

ejabberd: Multiple Denial of Service vulnerabilities

Background ejabberd is the Erlang jabber daemon. Description Multiple vulnerabilities have been discovered in ejabberd. Please review the CVE identifiers referenced below for details. Impact ejabberd allows remote attackers to cause a Denial of Service condition with the result of either crashing...

Code injection

The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service system crash via a crafted application that leverages the presence of a socket on the free list...

CVE-2012-2192

Summary: CVE-2012-2192 affects IBM AIX 5.3, 6.1, 7.1 and VIOS 2.2.1.4-FP-25 SP-02. Vulnerability: socketpair() usage can cause a local denial-of-service (system crash) when a socket remains on the free list, triggering a crash in the socket code path. Root cause: crash tied to how sockets are man...

PT-2012-3871

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3 through 7.1 VIOS version 2.2.1.4-FP-25 SP-02 Description The issue allows local users to cause a denial of service, resulting in a system crash, by leveraging a crafted application that utilizes the presence of a socket on...

CVE-2012-2192: Undefined Security Weakness

The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service system crash via a crafted application that leverages the presence of a socket on the free list...

CVE-2011-2496

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

CVE-2011-2496

Integer overflow in the vmatoresize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service BUGON and system crash via a crafted mremap system call that expands a memory mapping...

CVE-2011-2496

CVE-2011-2496 affects the Linux kernel prior to 2.6.39. An integer overflow in vma_to_resize (mm/mremap.c) lets local users trigger a BUG_ON and system crash via a crafted mremap call that expands a memory mapping. Mitigation: upgrade to kernel 2.6.39 or later where the issue is fixed. The connec...

Video drivers may fail to support Address Space Layout Randomization (ASLR)

Overview Some video drivers fail to support ASLR in Microsoft EMET "Always on" mode, which can limit the amount that such a system can be secured. Description ASLR, when combined with DEP Data Execution Prevention can be an effective mitigation against exploitation of vulnerabilities. For more...

Ubuntu: Security Advisory (USN-1459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2136

The sockallocsendpskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service heap-based buffer overflow and system crash or possibly gain privileges by leveraging access to a TUN/TAP...

Design/Logic Flaw

The setupcifssb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service system crash by placing a referral at the root of a share...

Design/Logic Flaw

The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...

CVE-2011-3363

The setupcifssb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service system crash by placing a referral at the root of a share...

CVE-2011-3363

The CVE-2011-3363 issue affects the Linux kernel up to version 2.6.38, specifically the setup_cifs_sb function in fs/cifs/connect.c. The root cause is improper handling of DFS referrals, enabling a remote CIFS server to trigger a denial-of-service (system crash) by placing a referral at the root ...

CVE-2011-3363: Improper Input Validation

The setupcifssb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service system crash by placing a referral at the root of a share...