kernel: nfsd: Incorrect handling of long RPC replies

The NFS2/3 RPC client could send long arguments to the NFS server. These encoded arguments are stored in an array of memory pages, and accessed using pointer variables. Arbitrarily long arguments could make these pointers point outside the array and cause an out-of-bounds memory access. A remote...

Virtuozzo 7 : readykernel-patch (VZA-2017-053)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - A vulnerability was found in the signal handling in the Linux kernel. A local unprivileged user could cause a kernel...

Kernel security update: Virtuozzo ReadyKernel patch 23.0 for Virtuozzo 7.0.0, 7.0.1, and 7.0.3

The cumulative Virtuozzo ReadyKernel patch updated with a security fix and a stability bug fix. The patch applies to Virtuozzo kernels 3.10.0-327.18.2.vz7.15.2 Virtuozzo 7.0.0, 3.10.0-327.36.1.vz7.18.7 Virtuozzo 7.0.1, and 3.10.0-327.36.1.vz7.20.18 Virtuozzo 7.0.3. Vulnerability id: PSBM-67221 A...

Virtuozzo 7 : readykernel-patch (VZA-2017-042)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - The NFS2/3 RPC client could send long arguments to nfsd server. These encoded arguments are stored in an array of...

Virtuozzo 7 : readykernel-patch (VZA-2017-038)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - The NFS2/3 RPC client could send long arguments to nfsd server. These encoded arguments are stored in an array of...

Important kernel security update: CVE-2017-7645 and other; Virtuozzo ReadyKernel patch 21.0 for Virtuozzo 7.0.x

The cumulative Virtuozzo ReadyKernel patch updated with security fixes. The patch applies to Virtuozzo kernels 3.10.0-327.36.1.vz7.18.7 Virtuozzo 7.0.1, 3.10.0-327.36.1.vz7.20.18 Virtuozzo 7.0.3, and 3.10.0-514.16.1.vz7.30.10 Virtuozzo 7.0.4. Vulnerability id: CVE-2017-7645 The NFS2/3 RPC client...

UBUNTU-CVE-2017-8106

The handleinvept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service NULL pointer dereference and host OS crash via a single-context INVEPT instruction with a NULL EPT pointer...

Kernel security update: CVE-2017-7472 and other; Virtuozzo ReadyKernel patch 19.1 for Virtuozzo 7.0.x

The cumulative Virtuozzo ReadyKernel patch updated with security fixes. The patch applies to Virtuozzo kernels 3.10.0-327.18.2.vz7.15.2 Virtuozzo 7.0.0, 3.10.0-327.36.1.vz7.18.7 Virtuozzo 7.0.1, and 3.10.0-327.36.1.vz7.20.18 Virtuozzo 7.0.3. Vulnerability id: CVE-2017-7472 It was found that...

CVE-2017-7645

The NFS2/3 RPC client could send long arguments to the NFS server. These encoded arguments are stored in an array of memory pages, and accessed using pointer variables. Arbitrarily long arguments could make these pointers point outside the array and cause an out-of-bounds memory access. A remote...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to cause a service failure a kernel crash by unmounting the file system and opening vnodes in the mntvnodelist...

Virtuozzo 7 : readykernel-patch (VZA-2017-028)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - Race condition in drivers/tty/nhdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system is related to errors in the code. Exploiting this vulnerability allows a local attacker to cause a system failure a kernel crash through a large number of system calls to getdents...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a person with privileged mounting functions, who operates locally, to cause a service failure a kernel crash by mounting a temporary file system with values of 1...

Virtuozzo 7 : readykernel-patch (VZA-2017-010)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - The tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a...

android_kernel_crash_poc

and...

kernel: Remotely triggerable recursion in GRE code leading to kernel crash

A flaw was found in the way the Linux kernel's networking subsystem handled offloaded packets with multiple layers of encapsulation in the GRO Generic Receive Offload code path. A remote attacker could use this flaw to trigger unbounded recursion in the kernel that could lead to stack corruption,...

Linux kernel elevation of privilege vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the dccprcvstateprocess function in the net/dccp/input.c file in Linux kernel version 4.9.11 and earlier, due to the program failing to...

UBUNTU-CVE-2017-2618

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

UBUNTU-CVE-2016-10153

The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging reliance on earlier...

Linux Kernel Denial of Service Vulnerability (CNVD-2017-01068)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux Kernel. An attacker could exploit this vulnerability to crash the host kernel, resulting in a denial of service...