FreeBSD-SA-05:06.iir

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:06.iir Security Advisory The FreeBSD Project Topic: Incorrect permissions on /dev/iir Category: core Module: sysdev Announced: 2005-05-06 Credits: Christian...

CVE-2005-0848

Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote attackers to cause a denial of service via an empty UDP packet to the server, which cannot detect tha...

CVE-2005-1126

The SIOCGIFCONF ioctl ifconf function in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory...

CVE-2005-1126

CVE-2005-1126 is a kernel memory disclosure vulnerability tied to the SIOCGIFCONF (ifconf) path. In FreeBSD 4.x (4.0–4.11) and 5.x (5.0–5.4), the ifconf code may copy uninitialized kernel memory to user space because the buffer is not cleared before use, enabling local users to obtain portions of...

CVE-2005-0848

CVE-2005-0848 affects multiple FUN Labs games (4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, US Most Wanted). The issue: remote attackers can cause a denial of service by sending an empty UDP packet to the game server; the serve...

CVE-2005-0180

Multiple integer signedness errors in the sgscsiioctl function in scsiioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copyfromuser and copytouser functions...

security flaw

Multiple integer signedness errors in the sgscsiioctl function in scsiioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copyfromuser and copytouser functions...

CVE-2004-0919

The syscons CONSSCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via 1 negative coordinates or 2 large coordinates...

Fedora Core 2 : kernel-2.6.10-1.8_FC2 (2005-014)

This update rebases the kernel to match the upstream 2.6.10 release, and adds a number of security fixes by means of adding the latest -ac patch. CVE-2004-1235 Paul Starzetz from isec.pl found a problem in the binary format loaders uselib function that could lead to potential priveledge escalatio...

FreeBSD syscons integer overflow

CONSSCRSHOT ioctl for syscons invalidely handles negative values...

FreeBSD-SA-04:15.syscons

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:15.syscons Security Advisory The FreeBSD Project Topic: Boundary checking errors in syscons Category: core Module: sysdevsyscons Announced: 2004-10-04 Credits:...

Boundary checking errors in syscons

The syscons CONSSCRSHOT ioctl2 does insufficient validation of its input arguments. In particular, negative coordinates or large coordinates may cause unexpected behavior. It may be possible to cause the CONSSCRSHOT ioctl to return portions of kernel memory. Such memory might contain sensitive...

Fedora Core 1 : kernel-2.4.22-1.2194.nptl (2004-186)

Numerous problems referencing userspace memory were identified in several device drivers by Al Viro using the sparse tool. The Common Vulnerabilities and Exposures project cve.mitre.org assigned the name CVE-2004-0495 to this issue. A problem was found where userspace code could execute certain...

CVE-2003-0175

SGI IRIX before 6.5.21 allows local users to cause a denial of service kernel panic via a certain call to the PIOCSWATCH ioctl...

CVE-2003-0175

CVE-2003-0175 affects SGI IRIX prior to 6.5.21 via the PIOCSWATCH ioctl: a local attacker can crash the kernel (DoS). CERT/CC and NVD confirm this is a local-denial condition caused by invoking PIOCSWATCH in user space. Vendor guidance (SGI advisory 20030603-01-P) recommends upgrading to IRIX 6.5...

SGI IRIX vulnerable to DoS when user space program calls the PIOCSWATCH ioctl() function

Overview A vulnerability in the SGI IRIX PIOCSWATCH ioctl function may allow local attackers to crash the operating system. Description SGI states that PIOCSWATCH ioctl "establishes or clears a set of watched areas in the traced process." According to SGI Security Advisory 20030603-01-P, a local...

NetBSD Security Advisory 2002-007: Repeated TIOCSCTTY ioctl can corrupt session hold counts

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-007 ================================= Topic: Repeated TIOCSCTTY ioctl can corrupt session hold counts Version: NetBSD-current: source prior to July 21, 2002 NetBSD-1.6 beta: source prior to July 23, 2002 NetBSD-1.5.: source prior to...

Linux news 30.04.00

Linux 2.3.99-pre6 Вышло новое ядро Linux из "нестабильной" серии: Linux 2.3.99-pre6. Подробнее: http://linuxtoday.com/stories/20829.html Kernel traffic 64 В новой версии обзора списка рассылки ядра можно узнать интересные подробности о: - дискуссии о DevFS - ошибках ioctl - проблемах с асинхронны...

CVE-2024-33223

An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33219

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...