CVE-2015-1635-POC

CVE-2015-1635-POC, MS15-034 HTTP.sys HTTP.sys is the kernel driver for Microsoft Windows that handles HTTP requests. It was introduced from IIS6.0 to optimize IIS server performance, and the IIS service process depends on HTTP.sys. The HTTP.sys remote code execution vulnerability is essentially a...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.9 have a security vulnerability. This vulnerability arises from the BPF verifier failing to reject the transfer of the PTRTOPACKET pointer to procedures that may modify data packets, potentially causing the data packet memory area to become invalid...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. One of these vulnerabilities arises from sockmapalloc, which does not reject entries greater than INTMAX. Additionally, sockmapfree uses a signed int to iterate through the sks array, leading to integer overflows and potential...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.30 contains a security vulnerability. This vulnerability arises from the max3100 serial port driver returning values prematurely when the system is suspended. The polling timer is not closed before releasing the port. When the SPI device unlinks before it recovers, it...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise from the fact that the IRQ is not stopped before terminating the work queue, resulting in the possibility of the IRQ still scheduling plat-work into the queue when the remove function removes the queue...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from a race condition in IPv6’s cached routing processing: when listdelinit is executed concurrently, listempty is incorrectly evaluated as true. This leads to the incorrect invocation of dstholdsafe, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains a security vulnerability. This vulnerability arises from the fact that the UDP socket is disconnected from the quadruplet hash table, but the hash count remains retained. As a result, data packets are still processed through quadruplet lookups, which may lea...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from the fact that SORESERVEMEM is not limited to TCP sockets, and no upper limit is set. This may lead to concurrent operations on UDP sockets damaging skforwardalloc and memcg accounting, or causing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains security vulnerabilities. These vulnerabilities arise from adding pointers to the extended area into the expected list when calling auxiliary functions. Subsequent reallocations of space after adding extensions cause the pointers to become invalid. Accessing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.13 contains a security vulnerability. This vulnerability arises from nftables not skipping expired elements when inserting or deleting catchall elements. As a result, expired elements become invisible but still prevent reinsertion or incorrect deactivation of elements...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.12 has a security vulnerability. This vulnerability stems from the function rtmt6check, which allows the configuration of rtinfo-addrnr to 0 when the request address matches certain conditions. This bypasses the loop termination condition in the IP6TRTFSTNSTRICT path...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.29 has a security vulnerability. This vulnerability stems from the fact that the Data-In branch of iscsitcphdrdissect does not check the data direction. As a result, data provided by the target may be written into the page that the initiator is about to send, causing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the zpcireportstatus function in the s390/pci framework, which accesses device drivers without acquiring a device lock when pdev is not NULL. This can lead to inconsistent states...