Disconf 安全漏洞

Disconf is a distributed configuration management platform by the individual developer Qiqi Liao. A security vulnerability exists in Disconf version 2.6.36, which stems from improper authentication...

PT-2024-16416 · Knightliao · Disconf

Name of the Vulnerable Software and Affected Versions: knightliao Disconf version 2.6.36 Description: A critical issue has been found, affecting an unknown part of the file /api/config/list of the component Configuration Center. This leads to improper authentication and can be initiated remotely...

Openswan < 2.6.36 IKE Packet NULL Pointer Dereference Remote DoS

The remote host is running a version of Openswan prior to version 2.6.36. It is, therefore, affected by a remote denial of service vulnerability due to a NULL pointer dereference flaw. A remote attacker, using a specially crafted ISAKMP message with an invalid KEYLENGTH attribute, can cause a...

kernel: drivers/usb/serial/mos*.c: reading uninitialized stack memory

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the 1 mos7720ioctl function in...

kernel: ipc/sem.c: reading uninitialized stack memory

The copysemidtouser function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 IPCINFO, 2 SEMINFO, 3 IPCSTAT, or 4 SEMSTAT command in a semctl system call...

kernel: arbitrary kernel memory write via i915 GEM ioctl

drivers/gpu/drm/i915/i915gem.c in the Graphics Execution Manager GEM in the Intel i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel before 2.6.36 does not properly validate pointers to blocks of memory, which allows local users to write to arbitrary kernel memory...

PT-2010-5014 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36 Description: The issue is related to the sctp auth asoc get hmac function in the Linux kernel, which does not properly validate the hmac ids array of an SCTP peer. This allows remote attackers to cause a...