[USN-169-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-169-1 August 19, 2005 linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities CAN-2005-2098, CAN-2005-2456, CAN-2005-2457, CAN-2005-2458, CAN-2005-2459, CAN-2005-2548, CAN-2005-2555...

USN-169-1: Linux kernel vulnerabilities

David Howells discovered a local Denial of Service vulnerability in the key session joining function. Under certain user-triggerable conditions, a semaphore was not released properly, which caused processes which also attempted to join a key session to hang forever. This only affects Ubuntu 5.04...

CVE-2005-2553

CVE-2005-2553 affects Linux kernel 2.4.x before 2.4.29, where a NULL pointer dereference in ptrace32.c's find_target can crash the kernel when tracing a 64-bit executable with 32-bit ltrace. The vulnerability is local and may lead to a kernel oops/crash. Public advisories in connected docs (e.g.,...

CVE-2005-1761

Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service kernel crash via ptrace and the restoresigcontext function...

CVE-2005-2134

The vulnerability CVE-2005-2134 affects NetBSD 1.6–2.0.2, specifically the clcs and emuxki audio drivers. A local attacker can trigger a denial-of-service (kernel crash) by issuing the set-parameters ioctl to an audio device to simultaneously change the block size and set the pause state to unpau...

CVE-2005-2134

The 1 clcs and 2 emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service kernel crash by using the set-parameters ioctl on an audio device to change the block size and set the pause state to "unpaused" in the same ioctl, which causes a divide-by-zero error...

CVE-2005-0449

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

CVE-2005-0449

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

CVE-2005-0209

Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via crafted IP packet fragments...

security flaw

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

Microsoft Windows XP - Local Denial of Service

source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is transferred over the newly created socket. It is...

Microsoft Windows XP - Local Denial of Service

Microsoft Windows XP - Local Denial of Service source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is...

CVE-2005-0384

Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service kernel crash via a pppd client...

CVE-2005-0177

nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...

CVE-2005-0177

nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...

security flaw

nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...

CVE-2005-0177

nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...

CVE-2005-0449

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

CVE-2005-0177

CVE-2005-0177 relates to the Linux kernel: nls_ascii.c incorrectly sized the translation table (128 vs 256), enabling a buffer overflow that can crash the kernel (DoS). Public references in Ubuntu/SUSE/NVD describe the same issue affecting Linux kernels up to 2.6.8.1, with fixes provided in newer...

USN-82-1: Linux kernel vulnerabilities

CAN-2004-0176: Michael Kerrisk noticed an insufficient permission checking in the shmctl function. Any process was permitted to lock/unlock any System V shared memory segment that fell within the the RLIMITMEMLOCK limit that is the maximum size of shared memory that unprivileged users can acquire...