PT-2011-5001 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue allows local users to cause a denial of service, resulting in a system crash, via crafted use of the sendmmsg system call. This is due to an incorrect pointer dereference in the sys...

USN-1300-1 : linux-fsl-imx51 vulnerabilities

A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. CVE-2011-4077 A flaw was found in the Journaling Block Device JBD. A local attacker able to mount ext3 or ext4 file...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7666)

This kernel update for the SUSE Linux Enterprise 10 SP4 kernel fixes several security issues and bugs. The following security issues were fixed : - The dccprcvstateprocess function in net/dccp/input.c in the Datagram Congestion Control Protocol DCCP implementation in the Linux kernel did not...

kernel: cifs: always do is_path_accessible check in cifs_mount

The setupcifssb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service system crash by placing a referral at the root of a share...

kernel: cifs: always do is_path_accessible check in cifs_mount

The setupcifssb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service system crash by placing a referral at the root of a share...

Adobe Flash Player Malformed ShapeRecords Memory Corruption (APSB11-28; CVE-2011-2452)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference while processing malformed ShapeRecords line segments. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an...

PT-2012-1691 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue is related to the dma rx function in the Linux kernel, which does not properly allocate receive buffers. This can be exploited by remote attackers to cause a denial of service,...

Code injection

IBM AIX 6.1 and 7.1 does not restrict the wparlimitsconfig and wparlimitsmodify system calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2011-1375

IBM AIX 6.1 and 7.1 does not restrict the wparlimitsconfig and wparlimitsmodify system calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2011-1375: Undefined Security Weakness

IBM AIX 6.1 and 7.1 does not restrict the wparlimitsconfig and wparlimitsmodify system calls, which allows local users to cause a denial of service system crash via a crafted call...

PT-2011-3093

Name of the Vulnerable Software and Affected Versions IBM AIX versions 6.1 through 7.1 Description The issue allows local users to cause a denial of service, resulting in a system crash, by making a crafted system call. Recommendations For IBM AIX versions 6.1 through 7.1, restrict access to the...

PT-2011-4799

Name of the Vulnerable Software and Affected Versions DAEMON Tools Lite versions prior to 4.41.3 DAEMON Tools Pro Standard versions prior to 4.41.0315 DAEMON Tools Pro Advanced versions prior to 4.41.0315 Description The issue allows local users to cause a denial of service, resulting in a system...

Ubuntu Update for linux-lts-backport-maverick USN-1242-1

Ubuntu Update for Linux kernel vulnerabilities USN-1242-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12421.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-lts-backport-maverick USN-1242-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu Update for linux USN-1243-1

Ubuntu Update for Linux kernel vulnerabilities USN-1243-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12431.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1243-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7734)

This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes several security issues and bugs. The following security issues have been fixed : - A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies to the host...

Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability

The host is running SMB/NETBIOS and prone to authentication bypass Vulnerability OpenVAS Vulnerability Test $Id: gbmswindowssmbsharepasswdnullsecbypassvuln.nasl 7550 2017-10-24 12:17:52Z cfischer $ Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability Authors: Antu Sanadi...

Microsoft Windows SMB/NETBIOS NULL Session Authentication Bypass Vulnerability

Microsoft Windows is prone to an authentication bypass vulnerability via SMB/NETBIOS. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DAEMON Tools vulnerable to denial-of-service

Overview DAEMON Tools contains a denial-of-service DoS vulnerability. DAEMON Tools is a software for optical media emulation. DAEMON Tools contains a denial-of-service DoS vulnerability. Satoshi Tanda of Fourteenforty Research Institute Inc. reported this vulnerability to IPA. JPCERT/CC coordinat...

JVN#07414354: DAEMON Tools vulnerable to denial-of-service

DAEMON Tools is a software for optical media emulation. DAEMON Tools contains a denial-of-service DoS vulnerability. Impact An attacker that can login to the system with the software running may cause the system to crash. Solution Update the Software Update to the latest version according to the...

Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges or cause a denial of...