PT-2011-4304 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.26 Description: The issue allows local users to cause a denial of service, resulting in a Divide Error Fault and panic, via a clock gettime system call. This is due to the div long long rem implementation in...

kernel: perf: Fix software event overflow

The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERFCOUNTSWCPUCLOCK events, which allows local users to cause a denial of service system hang via a crafted application...

Linux Kernel 3.0.0 - perf_count_sw_cpu_clock event Denial of Service

Linux Kernel 3.0.0 - perfcountswcpuclock event Denial of Service //Vince / Error with overflows and perf::perfcountswcpuclock / / This test will crash Linux 3.0.0 / / compile with gcc -O2 -o ofloswcpuclockcrash ofloswcpuclockcrash.c / / by Vince Weaver / define GNUSOURCE 1 include include include...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Low: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Gaining Precision in Information Leakage Attacks

It’s hard to narrow down your life’s work into one interesting event or tidbit. Even picking 10 would be tough. So instead of picking something I am well-known for, I wanted to look for something I had a lot of fun coming up with that you probably didn’t read. I’ve always been interested in...

Processor Information (via DMI)

Nessus was able to retrieve information about the remote system's hardware, such as its processor type, by using the SMBIOS aka DMI interface. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid45432; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate...

[SECURITY] Fedora 12 Update: chrony-1.23-8.20081106gitbe42b4.fc12

A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with dial-up Internet connections, and also supports computers in permanently connected environments...

SSL Certificate Expiry - Future Validity

The SSL certificate for the remote SSL-enabled service is not yet valid. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42980; scriptversion "$Revision: 1.8 $"; scriptcvsdate"$Date: 2012/04/02 16:34:10 $"; scriptnameenglish:"SSL Certificate Expiry - Future Validity";...

kernel security and bug fix update

2.6.18-164.2.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

Linux Kernel 'posix-timers.c' NULL指针引用拒绝服务漏洞

Bugraq ID: 35976 Linux是一款开放源代码的操作系统。 kernel/posix-timers.c文件中的"clocknanosleep"函数存在错误，调用clockid等于 CLOCKMONOTONICRAW的donanosleep可导致NULL指针引用而造成系统触发Panic，造成拒绝服务攻击。 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Lin...

MDVA-2008:027 : mandriva-kde-config

The KDE panel has a clock applet which includes de hability to change its appearance and behavior. Because of a configuration problem, this applet was not properly saving these changes were not properly saved, being lost at every user login. This update fixes the problem. %NASLMINLEVEL 70300...

MDVA-2008:091-1 : gnome-applets

The clock applet in GNOME could crash when using some specific locations or when using updated timezone data. The Recent Documents menu was not always able to start the right application for a specific document. Update: The previous gnome-applets package on x8664 was improperly built and included...

MDVA-2008:091 : gnome-panel

The clock applet in GNOME could crash when using some specific locations or when using updated timezone data. The Recent Documents menu was not always able to start the right application for a specific document. Updated packages for gnome-panel, libgweather, and gnome-applets fix these issues and...

Mandriva Update for mandriva-kde-config MDVA-2008:027 (mandriva-kde-config)

Check for the Version of mandriva-kde-config OpenVAS Vulnerability Test Mandriva Update for mandriva-kde-config MDVA-2008:027 mandriva-kde-config Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for mandriva-kde-config MDVA-2008:027 (mandriva-kde-config)

Check for the Version of mandriva-kde-config OpenVAS Vulnerability Test Mandriva Update for mandriva-kde-config MDVA-2008:027 mandriva-kde-config Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 4 : kernel (RHSA-2008:0237)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2007-5908

Rejected reason: Buffer overflow in the 1 sysfsshowavailableclocksources and 2 sysfsshowcurrentclocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. NOTE: follow-on analysis by Linux...

Buffer overflow

Rejected reason: Buffer overflow in the 1 sysfsshowavailableclocksources and 2 sysfsshowcurrentclocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. NOTE: follow-on analysis by Linux...