Linux Kernel 3.2.1 - Tracing Multiple Local Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/59055/info The Linux kernel is prone to multiple local denial-of-service vulnerabilities. Attackers can exploit these issues to trigger a kernel crash, which may result in a denial-of-service condition. cd /sys/kernel/debug/tracing echo 1234 | sudo tee -a...

Ubuntu 4.10 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-219-1)

Al Viro discovered a race condition in the /proc file handler of network devices. A local attacker could exploit this by opening any file in /proc/sys/net/ipv4/conf// and waiting until that interface was shut down. Under certain circumstances this could lead to a kernel crash or even arbitrary co...

Ubuntu 11.10 : linux vulnerabilities (USN-1720-1)

It was discovered that hypervkvpd, which is distributed in the Linux kernel, was not correctly validating the origin on Netlink messages. An untrusted local user can cause a denial of service of Linux guests in Hyper-V virtualization environments. CVE-2012-2669 Dmitry Monakhov reported a race...

USN-1719-1: Linux kernel (Oneiric backport) vulnerabilities

It was discovered that hypervkvpd, which is distributed in the Linux kernel, was not correctly validating the origin on Netlink messages. An untrusted local user can cause a denial of service of Linux guests in Hyper-V virtualization environments. CVE-2012-2669 Dmitry Monakhov reported a race...

Juniper's Junos Could Open Routers to TCP Attacks

UPDATE Some systems running older versions of Juniper Networks’ Junos OS software could be vulnerable to a transmission control protocol TCP flaw that can enable a hacker to crash and reboot certain routers. According to Australia’s IT News, an attacker could send a specially crafted TCP packet t...

Linux stack corruption in xen_failsafe_callback for 32bit PVOPS guests.

ISSUE DESCRIPTION xenfailsafecallback incorrectly sets up its stack if an iret fault is injected by the hypervisor. IMPACT Malicious or buggy unprivileged userspace can cause the guest kernel to crash, or operate erroneously. VULNERABLE SYSTEMS All 32bit PVOPS versions of Linux are affected, sinc...

Design/Logic Flaw

XENMEMpopulatephysmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service BUG triggered and host crash via invalid flags such as MEMFpopulateondemand...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These updated packages fix the following security issues : - the absence of a protection mechanism when attempting to access a critical section of code has been found in the Linux kernel open file descriptors control mechanism, fcntl. This could allow a local unprivileged user to simultaneously...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - a missing capability check was found in the Linux kernel dochangetype routine. This could allow a local unprivileged user to gain privileged access or cause a denial of service. CVE-2008-2931, Important - a flaw was found in the Linux kernel Direct-IO implementation. This could...

Scientific Linux Security Update : kernel on SL3.x i386/x86_64

These updated packages fix the following security issues : - the absence of a protection mechanism when attempting to access a critical section of code has been found in the Linux kernel open file descriptors control mechanism, fcntl. This could allow a local unprivileged user to simultaneously...

Linux kernel 2.6.x 'xfrm6_tunnel_rcv()'远程拒绝服务漏洞

Bugtraq ID: 53139 CVE ID：CVE-2012-1583 Linux是一款开放源代码的操作系统 装载xfrm6tunnel模块时存在安全问题，可导致skbuff两次释放而使内核崩溃。如果不需要使用xfrm6tunnel模块，可选择对其列为黑名单 0 Linux kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=d0772b70...

Linux kernel 2.6.x '__split_huge_page()'竞争条件本地拒绝服务漏洞

Linux是一款开源的操作系统 Linux内核存在安全漏洞，允许本地用户，Guest中的本地用户进行拒绝服务攻击 在发生"bad pmd"之后处理PMD表项存在竞争条件错误，本地攻击者可以利用漏洞使内核崩溃 0 Linux kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://comments.gmane.org/gmane.linux.kernel.mm/75413...

systemtap: kernel panic when processing malformed DWARF unwind data

SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service kernel panic and crash via vectors related to crafted DWARF data, which triggers a read of an invalid pointer...

Linux kernel 2.6.x KVM create_pit_timer()函数本地拒绝服务漏洞

BUGTRAQ ID: 51172 CVE ID: CVE-2011-4622 Linux是自由电脑操作系统内核。 Linux Kernel在createpittimer的实现上存在本地拒绝服务漏洞，KVM 83的arch/x86/kvm/i8254.c中的createpittimer函数在irqchip不可用时没有正确处理PIT IRQ，本地攻击者可利用定时器通过此漏洞造成内核崩溃，拒绝服务合法用户。 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.or...

kernel: security and bugfix update. (important)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used...

Linux Kernel IGMP Remote DoS Vulnerability

The Linux Kernel is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Titan FTP Server 8.40 Denial Of Service

!/usr/bin/python Exploit Title : Titan FTP Server 8.40 DoS Kernel Crash Date: 25/11/2011 Author: Houssam Sahli Software Link trial version : http://southrivertech.com/software/demosoft/titanftp.exe Version: 8.40 Developed by : South River Technologies, Inc. Tested on: Windows XP SP3 French...

UBUNTU-CVE-2011-4330

Stack-based buffer overflow in the hfsmac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via an HFS image with a crafted len field...

Linux Kernel可信数据报套接字（RDS）协议本地整数溢出漏洞

BUGTRAQ ID: 44549 CVE ID: CVE-2010-3865 Linux Kernel是linux 内核，其基础为linux平台，linux为C语言编写的内核，基于此内核又衍生出了具体的Red hat linux 、open suse linux等具体的操作系统，一套基于Linux内核的完整操作系统叫作Linux操作系统，或是GNU/Linux。 Linux Kernel在RDS协议的实现上存在安全漏洞，本地攻击者可利用此漏洞以提升的权限执行任意代码，使受影响内核崩溃。Red Hat Enterprise Linux 3, 4和Red Hat Enterprise...

CentOS Update for kernel CESA-2010:0504 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...