Linux Kernel Netfilter和Econet实现本地信息泄露漏洞

BUGTRAQ ID: 46919 CVE ID: CVE-2011-1170,CVE-2011-1171,CVE-2011-1172 Linux Kernel是Linux操作系统的内核。 Linux Kernel在Netfilter和Econet的实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 struct aunhdr在x8664的'pad'和'handle'字段之间存在4个填充字节，在发送ah到网络之前，这些字节在变量ah中没有初始化，这可导致4字节内核栈信息泄露。 Linux kernel 2.6.x 厂商补丁： Linux -----...

CVE-2011-2170

Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors...

Design/Logic Flaw

Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors...

CVE-2011-2170

Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors...

CVE-2011-2170

CVE-2011-2170 affects Google Chrome OS prior to R12 0.12.433.38 Beta. When Guest mode is enabled, users can alter settings on the about:flags page, with impact described as unspecified and local attack vectors; no explicit exploitation path or affected versions beyond this line are detailed in th...

CVE-2011-1680

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

DEBIAN-CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1680

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

UBUNTU-CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1680

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1680

CVE-2011-1680 concerns ncpmount in ncpfs 2.2.6 and earlier, where the /etc/mtab~ lock file is not removed after a failed attempt to add a mount entry. The entry notes unspecified impact and local attack vectors. Connected sources also indicate this issue is addressed alongside related CVEs (CVE-2...

CVE-2011-1677

CVE-2011-1677 affects the mount utility in util-linux

CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

Linux Kernel "iriap_getvaluebyclass_indication()"缓冲区溢出漏洞

CVE ID: CVE-2011-1180 Linux 是一种类似于UNIX 计算机操作系统。 Linux Kernel "iriapgetvaluebyclassindication"在实现上存在缓冲区溢出漏洞，本地攻击者可利用此漏洞造成拒绝服务或控制受影响系统。 此漏洞源于net/irda/iriap.c中的"iriapgetvaluebyclassindication"内的边界错误，可通过超长名称或属性造成栈缓冲区溢出。 Linux kernel 2.6.x 厂商补丁： Linux -----...

OpenJDK Launcher incorrect processing of empty library path entries (6983554)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.229 and earlier for Solaris and Linux allows local standalone applications to affect...

Linux Kernel "kvm_vcpu_events.interrupt.pad"字段本地信息泄露漏洞

BUGTRAQ ID: 45676 CVE ID: CVE-2010-4525 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息。 某些版本的内核没有初始化kvmvcpuevents.interrupt.pad字段就将其拷贝到了用户态，导致内核信息泄露。 Linux kernel 2.6.33-rc4 - 2.6.34 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux内核hmid_ds结构本地信息泄露漏洞

Linux内核是一个地方容易出现信息泄露漏洞。 本地攻击者可以利用此问题来获取敏感信息，可能导致进一步的攻击。 SuSE SUSE Linux Enterprise SDK 10 SP3 SuSE openSUSE 11.3 S.u.S.E. SUSE Linux Enterprise Server 10 SP3 S.u.S.E. SUSE Linux Enterprise Desktop 10 SP3 RedHat Enterprise MRG v1 for Red Hat Enterprise Linux version 5 Red Hat Fedora 14 Red Hat...