CVE-2013-1819

The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging the ability to mount an XFS filesyst...

1

kernel 2.6.18-348.2.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

CVE-2013-1819: Improper Input Validation

The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging the ability to mount an XFS filesyst...

CVE-2011-3638: Undefined Security Weakness

fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service system crash via vectors involving ext4 umount and mount operations...

DEBIAN-CVE-2013-1767

Use-after-free vulnerability in the shmemremountfs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service system crash by remounting a tmpfs filesystem without specifying a required mpol aka mempolicy mount option...

UBUNTU-CVE-2013-1767

Use-after-free vulnerability in the shmemremountfs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service system crash by remounting a tmpfs filesystem without specifying a required mpol aka mempolicy mount option...

CVE-2012-4530

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

CVE-2012-4530: Exposure of Sensitive Information to an Unauthorized Actor

The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

1

kernel 2.6.18-348.1.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

kernel security and bug fix update

kernel 2.6.18-348.1.1 - pci intel-iommu: reduce max num of domains supported Don Dutile 886876 885125 - fs gfs2: Fix leak of cached directory hash table Steven Whitehouse 886124 831330 - x86 mm: randomize SHLIBBASE Petr Matousek 804953 804954 CVE-2012-1568 - net be2net: create RSS rings even in...

CVE-2012-4508

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...

CVE-2012-4508: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized...

kernel security, bug fix and enhancement update

2.6.32-279.19.1.el6 - drm i915: dont clobber the pipe param in sanitizemodesetting Frantisek Hrbata 876549 857792 - drm i915: Sanitize BIOS debugging bits from PIPECONF Frantisek Hrbata 876549 857792 - net fix divide by zero in tcp algorithm illinois Flavio Leitner 871920 866514 CVE-2012-4565 - f...

Google Android Kernel 2.6 - Local Denial of Service Crash (PoC)

Exploit Title: Android Kernel 2.6 Local DoS Date: 12/7/12 Author: G13 Twitter: @g13net Versions: Android 2.2, 2.3 Category: DoS android Vulnerability The Android OS is vulnerable to a local DoS when a filename with a length of 2048 or larger is attempted to be written to the sdcardvfat fs multipl...

WordPress FS-Real-Estate SQL Injection

|| | || || | | | | 0 | In the name of iran | -|- | | | ||||| Exploit Title: Wordpress fs-real-estate-plugin/ Theme SQL Injection | Google Dork: inurl:/madebymilk/xml/markerlistings.xml | Exploit Author: Novin hack Category: Web Application Tested on: Windows 7 | | Location:...

kernel security and bug fix update

2.6.18-308.20.1.el5 - Revert: x86 mm: randomize SHLIBBASE Dave Anderson 804953 804954 CVE-2012-1568 2.6.18-308.19.1.el5 - net be2net: Remove code that stops further access to BE NIC based on UE bits Alexander Gordeev 867896 862811 - net netpoll: fix an incorrect check for NULL pointer Alexander...

1

2.6.18-308.20.1.0.1.el5 - kernel Initialize the local uninitialized variable stats. orabug 14051367 - fs JBD:make jbd support 512B blocks correctly for ocfs2. orabug 13477763 - x86 fix fpu context corrupt when preempt in signal context orabug 14038272 - net bonding: fix carrier detect when bond i...

kernel security and bug fix update

2.6.32-279.14.1.el6 - usb usbhid: Fix use-after-free in USBHID James Paradis 864827 857518 - usb Add kernel parameter to force iowatchdog for Intel EHCI HCD James Paradis 865713 846024 - block Fix hanging kernel threads in blkexecuterq James Paradis 865308 855984 - mm hugetlb: do not use...

Sql injection

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the 1 memberid or 2 groupid parameters in a removemember action or 3 id parameter to...

Sql injection

Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 deleteusrgrp parameter in a deleteusergroups action, 2 usergroup paramete...