324 matches found
[slackware-security] kernel
New kernel packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.88/: Upgraded. This update fixes the security vulnerability known as "BlueBorne". The native Bluetooth stack in the...
[slackware-security] Slackware 14.0 kernel
New kernel packages are available for Slackware 14.0 to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/linux-3.2.90/: Upgraded. This kernel fixes security issues including "Stack Clash". The issues may result in denial-of-service conditions or may...
PT-2017-2769 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12.4 Description: The issue is related to the sanity check ckpt function in fs/f2fs/super.c of the Linux kernel, which incorrectly checks the indexing of the blkoff and segno arrays. This can be exploited by a...
CVE-2017-7477
A flaw was found in the way Linux kernel allocates heap memory to build the scattergather list from a fragment listskbshinfoskb-fraglist in the socket bufferskbbuff. The heap overflow occurred if 'MAXSKBFRAGS + 1' parameter and 'NETIFFFRAGLIST' feature are both used together. A remote user or...
Linux Dirty COW Local File Overwrite
Added: 10/27/2016 CVE: CVE-2016-5195 BID: 93793 Background This tool allows you to overwrite an arbitrary file on Linux systems. Problem A race condition exists in the way the Linux kernel's memory subsystem handles the copy-on-write COW breakage of private read-only memory mappings. An...
kernel security update
3.10.0-327.36.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.36.2 - net add recursion limit to GRO Sabrina Dubroca 1378405 1374191 CVE-2016-7039...
PT-2015-3175 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.4 Description: The issue is related to errors in pointer dereferencing in the nf nat redirect ipv4 function in the Linux kernel. This can be exploited by a remote attacker to cause a denial of service,...
CentOS 7 : kernel (CESA-2015:1137)
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Linux kernel __sock_diag_rcv_msg Netlink message privilege elevation
Added: 05/13/2014 CVE: CVE-2013-1763 BID: 58137 OSVDB: 90604 Background Netlink is a feature of the Linux kernel which allows communication between kernel and user space. Problem An array index error in the sockdiagrcvmsg function in the Linux kernel allows local users to gain root privileges by...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5.9 Extended Update Support. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, whic...
PT-2013-5051 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12 Description: The issue is related to multiple integer overflows in Alchemy LCD frame-buffer drivers. Local users can create a read-write memory mapping for the entirety of kernel memory and gain privileges...
CentOS 5 : kernel (CESA-2013:1449)
Updated kernel packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Mandrake Linux Security Advisory : kernel (MDKSA-2000:012)
POSIX 'Capabilities' have recently been implemented in the Linux kernel. These 'Capabilities' are an additional form of privilege control to enable more specific control over what privileged processes can do. Capabilities are implemented as three fairly large bitfields, which each bit representin...
PT-2011-2816 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38-rc5 Description: The issue concerns the Radeon GPU drivers in the Linux kernel, which fail to properly validate data related to the AA resolve registers. This allows local users to write to arbitrary memo...
PT-2010-5117 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: A stack-based buffer overflow issue exists in the econet sendmsg function, located in net/econet/af econet.c. This issue can be exploited by local users when an econet address is configured...
DSA-1436-1 linux-2.6 fai-kernels user-mode-linux - several vulnerabilities
Bulletin has no description...
[SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1381-2 [email protected] http://www.debian.org/security/ Dann Frazier October 12th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1381-1 [email protected] http://www.debian.org/security/ Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq -...