Sun Solaris加密驱动本地拒绝服务漏洞

BUGTRAQ ID: 34000 CVECAN ID: CVE-2009-0838 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的加密伪设备驱动没有正确地释放内存，本地攻击者可以通过vmemhashdelete函数导致系统忙碌。如果出现上述漏洞，系统可能出现类似于以下栈追踪的忙碌： vmemhashdelete: bad free vmemhashdelete vmemxfree objectgetattributevalue fopioctl ioctl Sun Solaris 10.0x86 Sun Solaris 10.0 Sun...

Debian DSA-1653-1 : linux-2.6 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6716 Joe Jin reported a local denial of service vulnerability that allows...

SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

Null pointer dereference

Unspecified vulnerability in the strfreectty function in the Special File System SPECFS in Sun Solaris 8 through 10 allows local users to cause a denial of service system panic, related to passing a NULL pointer to the pgsignal function...

Code injection

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

CVE-2007-4495 concerns the Solaris 10 ata disk driver on x86, with the impact described as a local denial of service via an unspecified ioctl function (Bug 6433124). Connected documents indicate mitigations in Solaris ATA/DT driver updates, e.g., Solaris Update for ata Driver 117122-03 and relate...

Code injection

Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service system panic via unspecified ioctl functions, aka Bug 6433123...

CVE-2007-4492

CVE-2007-4492 describes multiple unspecified vulnerabilities in the Sun Solaris ata disk driver on x86 (Solaris 8/9/10) that can cause a local denial of service via unspecified ioctl calls. Connected documents reference Solaris updates for the ata driver (e.g., 117122-03 and 109798-04) as remedia...

Race condition

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

CVE-2007-0914

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

Sun Solaris畸形ICMP报文远程拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 ICMP报文处理过程实现上存在安全漏洞，远程非特权用户可能利用此漏洞导致拒绝服务（DoS）。 如果触发了上述漏洞，系统可能变得忙碌，栈追踪类似于： ip:illrefrele+0x80x0, 0x0, 0x0, 0x1010 ip:ipoutput+0x149c0x0?, 0x6000864f2c0?, 0x60001bcede0?, , 0x2 ip:ipwput0x60001bcede0, 0x600053ac140 - frame recycled...

Mac OS X fpathconf() DoS

fpathconf call for unsupported file type causes system panic...

CVE-2006-4139

Race condition in Sun Solaris 10 allows attackers to cause a denial of service system panic via unspecified vectors related to ifconfig and either netstat or SNMP queries...

CVE-2006-4117

The squeuedrain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service "bad trap" and system panic by opening and closing a large number of TCP connections "heavy TCP/IP loads". NOTE: the original report specifies the function na...

Sun Solaris DoS

System panic in drainsqueue on large number of TCP connections...

CVE-2006-3468

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...

CVE-2006-3728

Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 118844-29 on x86 and without patch 118833-11 118855-08 allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic,...

CVE-2006-3468

CVE-2006-3468 affects the Linux kernel 2.6.x when NFS and EXT3 are used. A remote attacker can trigger a denial of service by sending a crafted UDP packet containing a V2 lookup procedure that specifies a bad file handle (inode number). This triggers an error and causes the exported directory to ...

CVE-2006-3468

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...