1317 matches found
UBUNTU-CVE-2016-3135
Integer overflow in the xtalloctableinfo function in net/netfilter/xtables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service heap memory corruption via an IPTSOSETREPLACE setsockopt call...
PT-2015-6107
Name of the Vulnerable Software and Affected Versions Ghostscript versions 9.15 and earlier Description The issue is caused by an integer overflow in the gs heap alloc bytes function, which can lead to a denial of service crash when processing a crafted Postscript file. This can be triggered usin...
UBUNTU-CVE-2013-7348
Double free vulnerability in the ioctxalloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service system crash or possibly have unspecified other impact via vectors involving an error condition in the aiosetupring function...
PT-2014-3383
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.4 Description A double free vulnerability exists in the ioctx alloc function in fs/aio.c, allowing local users to cause a denial of service, potentially leading to a system crash, or possibly having other...
PT-2013-5043
Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.1.x, 4.2.x, and 4.3.x Description The issue allows local guest administrators with access to multiple vcpus to cause a denial of service host deadlock due to the incorrect locking order of page alloc lock and grant...
PT-2013-5749
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.0 through 1.10.1 Description The issue is related to the Bluetooth HCI ACL dissector, which does not properly maintain a certain free list. This allows remote attackers to cause a denial of service, resulting in an...
Varnish 2.1.5 DoS in STV_alloc() while parsing Content-Length header
STValloc | st != NULL Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 Versions: 2.1.5 Full panic message: Panic message: Assert error in STValloc, stevedore.c line 192:012 Conditionst != NULL not true. Summary: Varnish 2.1.5 crash and restart via...
PT-2012-4773
Name of the Vulnerable Software and Affected Versions binutils version 2.22 Description The issue is related to multiple integer overflows in the objalloc alloc function and objalloc alloc macro, which can be exploited by remote attackers to cause a denial of service crash through vectors related...
PT-2011-1751
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.35 Description The socket implementation in the Linux kernel has an issue with managing a backlog of received packets. This allows remote attackers to cause a denial of service by sending a large amount of...
kernel: 64-bit Compatibility Mode Stack Pointer Underflow
The compatallocuserspace functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the...
Microsoft SMB Server Trans2 Zero Size Pool Alloc (MS10-054)
Exploit for windows platform in category dos / poc =========================================================== Microsoft SMB Server Trans2 Zero Size Pool Alloc MS10-054 =========================================================== !/usr/bin/env python import sys,struct,socket from socket import if...
Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)
Microsoft - SMB Server Trans2 Zero Size Pool Alloc MS10-054 !/usr/bin/env python import sys,struct,socket from socket import if lensys.argv=2: print '' print ' MS10-054 Proof Of Concept by Laurent Gaffie' print ' Usage: python '+sys.argv0+' TARGET SHARE-NAME No backslash' print ' Example: python...
Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)
!/usr/bin/env python import sys,struct,socket from socket import if lensys.argv=2: print '' print ' MS10-054 Proof Of Concept by Laurent Gaffie' print ' Usage: python '+sys.argv0+' TARGET SHARE-NAME No backslash' print ' Example: python '+sys.argv0+' 192.168.8.101 users' print '...
Linux Kernel ALSA驱动snd-page-alloc本地Proc文件信息泄露漏洞
BUGTRAQ ID: 25807 CVECAN ID: CVE-2007-4571 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux系统的ALSA声卡驱动实现上存在漏洞，本地攻击者可能利用此漏洞获取内核内存中的敏感信息。 Linux Kernel在处理多个/proc/driver/snd-page-alloc文件的读操作时存在安全漏洞，sound/core/memalloc.c文件中如下定义了读操作的系统调用sndmemprocread： 484 static int sndmemprocreadchar page, char start, offt of...
CVE-2007-4571: Undefined Security Weakness
The sndmemprocread function in sound/core/memalloc.c in the Advanced Linux Sound Architecture ALSA in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information kernel memory contents via a small count argument, as demonstrate...
Linux Kernel 2.6.x - ALSA snd-page-alloc Local Proc File Information Disclosure
/ source: https://www.securityfocus.com/bid/25774/info / The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue may allow local attackers to gain elevated privileges, facilitating the complete compromise of affected computers. Versions of Linux kernel prior...
