Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-38-1)

CAN-2004-0814 : Vitaly V. Bursov discovered a Denial of Service vulnerability in the 'serio' code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

CVE-2005-3358: Undefined Security Weakness

Linux kernel before 2.6.15 allows local users to cause a denial of service panic via a setmempolicy call with a 0 bitmask, which causes a panic when a page fault occurs...

CVE-2002-2197

CVE-2002-2197 affects Sun Solaris 8.0. A local user can trigger a kernel panic by running a program that uses /dev/poll, causing a NULL pointer dereference in the kernel. The provided connected documents confirm the vulnerable component and the root cause (NULL pointer dereference via /dev/poll),...

CVE-2002-2197: Undefined Security Weakness

Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service kernel panic via a program that uses /dev/poll, triggering a NULL pointer dereference...

CVE-2005-2708: Undefined Security Weakness

The searchbinaryhandler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service panic, as demonstrated by running a process using the bash ulimi...

CVE-2005-3238: Undefined Security Weakness

Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service panic via unspecified attack vectors...

security flaw

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...

security flaw

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...

CVE-2005-1913

CVE-2005-1913 affects the Linux kernel up to version 2.6.12.1. The vulnerability occurs when a non group-leader thread executes a different program while an itimer is pending; the expiry signal is delivered to the old group-leader task, which no longer exists, causing a kernel panic (local DoS). ...

CVE-2005-1913: Undefined Security Weakness

The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service kernel panic via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist...

USN-178-1: Linux kernel vulnerabilities

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

CVE-2005-2872: Undefined Security Weakness

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...

CVE-2005-1768: Undefined Security Weakness

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...

CVE-2002-1912

SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service null pointer exception and kernel panic via a large number of packets...

CVE-2002-1912: NULL Pointer Dereference

SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service null pointer exception and kernel panic via a large number of packets...

CVE-2002-1674

procfs on FreeBSD before 4.5 allows local users to cause a denial of service kernel panic by removing a file that the fstatfs function refers to...

CVE-2002-1674

CVE-2002-1674 affects FreeBSD procfs prior to 4.5. The vulnerability arises when a local user removes a file that the kernel’s fstatfs function refers to, potentially causing a kernel panic (local DoS). The provided documents do not include concrete exploit details or remediation steps.

CVE-2002-1674: Undefined Security Weakness

procfs on FreeBSD before 4.5 allows local users to cause a denial of service kernel panic by removing a file that the fstatfs function refers to...

[SA15722] OpenBSD "ip_ctloutput()" Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-0969

Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via crafted parameters...