CentOS 5 : kernel (CESA-2009:1193)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1548 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

RHEL 5 : kernel (RHSA-2009:1548)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel ecryptfs NULL pointer dereference

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

kernel security and bug fix update

2.6.18-164.6.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:289)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easi...

Debian: Security Advisory (DSA-1915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq -...

DSA-1915-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

CVE-2009-2908

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

Null pointer dereference

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

CVE-2009-2908

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

CVE-2009-2908

CVE-2009-2908 affects the Linux kernel 2.6.31: the d_delete function in fs/ecryptfs/inode.c can lead to a negative dentry and a NULL pointer dereference. Local users can cause a kernel OOPS and potentially execute arbitrary code; exploitation demonstrated via a Mutt temporary directory in an eCry...

CVE-2009-2908

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

PT-2009-5258

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.31 Description: The issue allows local users to cause a denial of service and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference. This can be...

Linux Kernel eCryptfs空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 36639 CVE ID: CVE-2009-2908 Linux Kernel是开放源码操作系统Linux所使用的内核。 在对低位的dentry调用vfsunlink时，如果dcount为1则ddelete会将dentry转换为负数的dentry。在执行read或write时ecryptfsreadupdateatime或ecryptfsgetxattr中引用了负数的 dentry会触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel eCryptfs Null指针引用本地拒绝服务漏洞

Bugraq ID: 36639 CVE ID：CVE-2009-2908 Linux是一款开放源代码的操作系统。 Linux 'eCryptfs'组件存在漏洞，本地攻击者可以利用漏洞破坏内存进行拒绝服务攻击。 在低dentry调用vfsunlink时，当dcount为1，ddelete会把dentry变为负的dentry。这可导致当 read或write完成时引用Null指针及在ecryptfsreadupdateatime或 ecryptfsgetxattr中引用负的dentry的dinode。 在eCryptfs挂接点放置mutt的tmpdir可触发oops，可通过如下序列重现：...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1212 / 1218 / 1219)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.29 fixing various bugs and security issues. The following security issues were fixed : - A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2692 - A kernel stack...

CentOS Security Advisory CESA-2009:1307 (ecryptfs-utils)

The remote host is missing updates to ecryptfs-utils announced in advisory CESA-2009:1307. CESA-2009:1307 64933 2 $Id: ovcesa20091307.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1307 ecryptfs-utils Authors: Thomas Reinke Copyright: Copyright c 200...