2175 matches found
Unbreakable enterprise kernel security update
2.6.32-100.20.1.el5 - fs xfs: return inode fork offset in bulkstat for fsr Dave Chinner - fs xfs: always use iget in bulkstat Dave Chinner CVE-2010-2943 - fs xfs: validate untrusted inode numbers during lookup Dave Chinner CVE-2 010-2943 - fs xfs: rename XFSIGETBULKSTAT to XFSIGETUNTRUSTED Dave...
RedHat Update for kernel RHSA-2010:0723-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0723-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
CVE-2010-2943
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
Code injection
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
CVE-2010-2943
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
CVE-2010-2943
CVE-2010-2943 affects the Linux kernel's XFS implementation up to version 2.6.34, where inode allocation B-trees are not consulted before reading inode buffers. This allows remote authenticated users to read unlinked files or read/overwrite disk blocks that were previously allocated to an unlinke...
XFS Deleted Inode Local Information Disclosure Vulnerability
Exploit for linux platform in category local exploits ============================================================ XFS Deleted Inode Local Information Disclosure Vulnerability ============================================================ stalehandle.c - attempt to create a stale handle and open it...
CVE-2010-2943
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
kernel: xfs: validate inode numbers in file handles correctly
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
PT-2010-4424 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue allows remote authenticated users to read unlinked files or read and overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked...
XFS - Deleted Inode Local Information Disclosure
XFS - Deleted Inode Local Information Disclosure / stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as publishe...
XFS - Deleted Inode Local Information Disclosure
/ stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version...
SuSE9 Security Update : the Linux kernel (YOU Patch Number 12646)
This updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security bugs were fixed : - Incorrect buffer handling in the biarch-compat buffer handling could be used by local attackers to gain root privileges. This problem affects foremost...
CVE-2010-3078
The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call...
[SECURITY] [DSA 2110-1] New Linux 2.6.26 packages fix several issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2110-1 [email protected] http://www.debian.org/security/ dann frazier September 17, 2010 http://www.debian.org/security/faq -...
Linux kernel multiple security vulnerabilities
DoS conditions, CIFS client privilege escalation, doanonymouspage privilege escalation, information leak in XFS, privilege escalation in compatallocuserspace...
Debian DSA-2110-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2492 Andre Osterhues reported an issue in the eCryptfs...
DSA-2110-1 linux-2.6 - several issues
Bulletin has no description...
CVE-2010-2226
CVE-2010-2226 affects the Linux kernel: the xfs_swapext function in fs/xfs/xfs_dfrag.c does not properly validate file descriptors passed to the SWAPEXT ioctl, enabling a local user with write access to swap a file into another and gain read access. The issue is present in kernel versions before ...