CVE-2011-2484

CVE-2011-2484 affects the Linux kernel, specifically code paths in kernel/taskstats.c. In kernels 2.6.39.1 and earlier, add_del_listener does not prevent multiple registrations of exit handlers, enabling a local attacker to cause denial of service through memory/CPU exhaustion and potentially byp...

CVE-2011-2484

The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...

CVE-2011-2484: Undefined Security Weakness

The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...

Sql injection

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the 1 arguments and 2 environment, which allows local users to cause a denial of service memory consumption via a crafted exec system call, aka an "OOM dodging issue," a...

CVE-2010-4243

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the 1 arguments and 2 environment, which allows local users to cause a denial of service memory consumption via a crafted exec system call, aka an "OOM dodging issue," a...

CVE-2010-4243

CVE-2010-4243 affects the Linux kernel up to version 2.6.37. The issue is in fs/exec.c where the OOM Killer does not assess stack memory usage of the arrays representing (1) arguments and (2) environment during an exec, enabling a local user to cause memory exhaustion (denial of service) via a cr...

Linux Kernel "execve()"内存扩展"OOM-killer"本地拒绝服务漏洞

BUGTRAQ ID: 45004 CVE ID: CVE-2010-4243 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"OOM-killer"功能在实现上存在安全漏洞，本地攻击者可利用此漏洞终止不相关的进程，造成拒绝服务。 漏洞源于oomkill函数看不到没有附加到任何线程的已分配内存。 Linux kernel 2.6.24.3 - 2.6.37 RedHat Enterprise Linux Desktop v.5 client 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability

Exploit for linux platform in category dos / poc ================================================================ Linux Kernel 'setupargpages' Denial of Service Vulnerability ================================================================ / known for over a year, fixed in grsec bug is due to a b...

Unfixed XSS vulnerability at www.everified.com

Security researcher Killer-TR, has submitted on 11/11/2010 a cross-site-scripting XSS vulnerability affecting www.everified.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currentl...

kernel: DoS on x86_64

The loadelfbinary function in fs/binfmtelf.c in the Linux kernel before 2.6.32.8 on the x8664 platform does not ensure that the ELF interpreter is available before a call to the SETPERSONALITY macro, which allows local users to cause a denial of service system crash via a 32-bit application that...

Unfixed XSS vulnerability at www.psv.tv

Security researcher Killer-TR, has submitted on 13/10/2010 a cross-site-scripting XSS vulnerability affecting www.psv.tv, which at the time of submission ranked 565596 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Unfixed XSS vulnerability at www.rijnmond.nl

Security researcher Killer-TR, has submitted on 13/10/2010 a cross-site-scripting XSS vulnerability affecting www.rijnmond.nl, which at the time of submission ranked 60965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at www.vkbanen.nl

Security researcher Killer-TR, has submitted on 23/09/2010 a cross-site-scripting XSS vulnerability affecting www.vkbanen.nl, which at the time of submission ranked 89940 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is current...

Unfixed XSS vulnerability at www.kurdiplace.nl

Security researcher Killer-TR, has submitted on 08/11/2010 a cross-site-scripting XSS vulnerability affecting www.kurdiplace.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Unfixed XSS vulnerability at www.bondtegenvloeken.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.bondtegenvloeken.nl, which at the time of submission ranked 17887346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. I...

Unfixed XSS vulnerability at www.kunsthal.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.kunsthal.nl, which at the time of submission ranked 1506200 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at www.eur.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.eur.nl, which at the time of submission ranked 43943 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed XSS vulnerability at www.albeda.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.albeda.nl, which at the time of submission ranked 710170 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...

Unfixed XSS vulnerability at www.europeesplatform.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.europeesplatform.nl, which at the time of submission ranked 3231093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It...

Code injection

The procoomscore function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation...