4135 matches found
USN-331-1: Linux kernel vulnerabilities
A Denial of service vulnerability was reported in iptables' SCTP conntrack module. On computers which use this iptables module, a remote attacker could expoit this to trigger a kernel crash. CVE-2006-2934 A buffer overflow has been discovered in the dvdreadbca function. By inserting a specially...
[SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1097-1 [email protected] http://www.debian.org/security/ Dann Frazier, Troy Heber June 14th, 2006 http://www.debian.org/security/faq -...
security flaw
Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service infinite recursion and crash via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the...
Code injection
The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...
CVE-2006-2205
The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...
CVE-2006-2205
The CVE-2006-2205 entry affects NetBSD 3.0, where the audio_write function is exposed to a local-access change via the audiosetinfo ioctl that can alter the sample rate of an audio device. This leads to a local denial-of-service (kernel crash). The provided documents do not specify affected subco...
CVE-2006-2205
The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...
USN-281-1: Linux kernel vulnerabilities
The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...
Design/Logic Flaw
The elfloadfile function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service kernel crash via an ELF interpreter that does not have a PTLOAD section in its header, which triggers a null dereference...
CVE-2006-1589
The elfloadfile function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service kernel crash via an ELF interpreter that does not have a PTLOAD section in its header, which triggers a null dereference...
CVE-2006-1589
The CVE-2006-1589 entry affects NetBSD 2.0 through 3.0, where the elf_load_file function is vulnerable. A local user can trigger a kernel crash (denial of service) by loading an ELF interpreter that lacks a PT_LOAD header, causing a null dereference. The available connected documents confirm the ...
security flaw
The IPv6 flow label handling code ip6flowlabel.c in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service crash by triggering a free of non-allocated memory...
[SA18482] Linux Kernel Multiple Denial of Service Vulnerabilities
TITLE: Linux Kernel Multiple Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA18482 VERIFY ADVISORY: http://secunia.com/advisories/18482/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: Some...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-47-1)
Georgi Guninski discovered two Denial of Service vulnerabilities in the Linux kernel. An integer overflow in the vcresize function caused the memory allocation for the new screen being too short, thus causing a buffer overflow and a kernel crash. There was also a memory leak in the ipoptionsget...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-110-1)
Alexander Nyberg discovered an integer overflow in the sysfswritefile function. A local attacker could exploit this to crash the kernel or possibly even execute arbitrary code with root privileges by writing to an user-writable file in /sys under certain low-memory conditions. However, there are...
Ubuntu 4.10 / 5.04 : linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities (USN-187-1)
A Denial of Service vulnerability was detected in the stack segment fault handler. A local attacker could exploit this by causing stack fault exceptions under special circumstances scheduling, which lead to a kernel crash. CAN-2005-1767 Vasiliy Averin discovered a Denial of Service vulnerability ...
Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow
/ source: https://www.securityfocus.com/bid/15846/info Linux kernel is prone to a local integer-overflow vulnerability. A successful attack can result in a kernel crash. Arbitrary code execution may be possible as well, but this has not been confirmed. All 2.6.x versions of the Linux kernel are...
CVE-2002-2188
OpenBSD before 3.2 is affected by a local denial-of-service in the kernel caused by getrlimit(2) with invalid arguments, likely due to an integer signedness error. The impact is a kernel crash. Mitigation provided in the references includes patches such as 018_kernresource.patch (OpenBSD 3.1 comm...