MiracleLinux 3 : kvm-83-224.0.1.AXS3 (AXSA:2011-250:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-250:01 advisory. KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running...

PT-2015-1942 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 2.3.1 Linux kernel versions prior to 2.6.33 Description: The issue is caused by a buffer overflow in the pit ioport read function of the QEMU emulator, which does not properly distinguish between read lengths and write...

Портирование эксплойта ACPI custom_method.

Наткнулся недавно на упоминание декабрьского эксплойта Jon Oberheide. В качестве челленджа задался идеей портировать этот эксплойт. Первоначальный эксплойт работает только на ноутбуках где есть LID ACPI девайс состояния крышки и исключительно на 64-битных системах. Задача: портировать эксплойт на...

Race condition

Race condition in the sctpicmpprotounreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service panic via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and...

CVE-2010-1086

The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...