3921 matches found
Ubuntu 4.10 / 5.04 : linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities (USN-187-1)
A Denial of Service vulnerability was detected in the stack segment fault handler. A local attacker could exploit this by causing stack fault exceptions under special circumstances scheduling, which lead to a kernel crash. CAN-2005-1767 Vasiliy Averin discovered a Denial of Service vulnerability ...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-110-1)
Alexander Nyberg discovered an integer overflow in the sysfswritefile function. A local attacker could exploit this to crash the kernel or possibly even execute arbitrary code with root privileges by writing to an user-writable file in /sys under certain low-memory conditions. However, there are...
Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow
/ source: https://www.securityfocus.com/bid/15846/info Linux kernel is prone to a local integer-overflow vulnerability. A successful attack can result in a kernel crash. Arbitrary code execution may be possible as well, but this has not been confirmed. All 2.6.x versions of the Linux kernel are...
CVE-2002-2188
OpenBSD before 3.2 allows local users to cause a denial of service kernel crash via a call to getrlimit2 with invalid arguments, possibly due to an integer signedness error...
CVE-2002-2188
OpenBSD before 3.2 is affected by a local denial-of-service in the kernel caused by getrlimit(2) with invalid arguments, likely due to an integer signedness error. The impact is a kernel crash. Mitigation provided in the references includes patches such as 018_kernresource.patch (OpenBSD 3.1 comm...
security flaw
ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service kernel crash...
security flaw
Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service kernel crash via ptrace and the restoresigcontext function...
security flaw
The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service kernel crash via a "non-canonical" address...
security flaw
The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service kernel crash via a "non-canonical" address...
CVE-2005-2457
The driver for compressed ISO file systems zisofs in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service kernel crash via a crafted compressed ISO file system...
CVE-2005-2458
inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service kernel crash via a compressed file with "improper tables"...
CVE-2005-2459
CVE-2005-2459 affects the Linux kernel prior to 2.6.12.5, where the huft_build function in inflate.c of the zlib routines returns the wrong value. This bug allows remote attackers to crash the kernel via a specially crafted compressed file, causing a null pointer dereference (a denial of service)...
[USN-169-1] Linux kernel vulnerabilities
=========================================================== Ubuntu Security Notice USN-169-1 August 19, 2005 linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities CAN-2005-2098, CAN-2005-2456, CAN-2005-2457, CAN-2005-2458, CAN-2005-2459, CAN-2005-2548, CAN-2005-2555...
USN-169-1: Linux kernel vulnerabilities
David Howells discovered a local Denial of Service vulnerability in the key session joining function. Under certain user-triggerable conditions, a semaphore was not released properly, which caused processes which also attempted to join a key session to hang forever. This only affects Ubuntu 5.04...
CVE-2005-2553
CVE-2005-2553 affects Linux kernel 2.4.x before 2.4.29, where a NULL pointer dereference in ptrace32.c's find_target can crash the kernel when tracing a 64-bit executable with 32-bit ltrace. The vulnerability is local and may lead to a kernel oops/crash. Public advisories in connected docs (e.g.,...
CVE-2005-1761
Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service kernel crash via ptrace and the restoresigcontext function...
CVE-2005-2134
The 1 clcs and 2 emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service kernel crash by using the set-parameters ioctl on an audio device to change the block size and set the pause state to "unpaused" in the same ioctl, which causes a divide-by-zero error...
CVE-2005-2134
The vulnerability CVE-2005-2134 affects NetBSD 1.6–2.0.2, specifically the clcs and emuxki audio drivers. A local attacker can trigger a denial-of-service (kernel crash) by issuing the set-parameters ioctl to an audio device to simultaneously change the block size and set the pause state to unpau...
CVE-2005-0449
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...