kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

RHEL 5 : kernel (RHSA-2009:1455)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:1455 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fix: a NULL pointer dereference flaw was found in the...

kernel security and bug fix update

2.6.18-128.4.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel: soft lockup occurs when network load is very high

The qdiscrun function in net/sched/schgeneric.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service soft lockup by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in...

Nokia S60 SMSMMS (Curse of Silence) - Denial of Service

Nokia S60 SMSMMS Curse of Silence - Denial of Service Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...

Linux Kernel qdisc_run()本地拒绝服务漏洞

BUGTRAQ ID: 32985 CVECAN ID: CVE-2008-5713 Linux Kernel是开放源码操作系统Linux所使用的内核。 在多核（如16核）SMP机器上，如果并发的高流量的网络负载，就会导致内核中出现软锁定。 锁定出现在net/sched/schgeneric.c的84行的qdiscrun函数中。由于驱动持续发送报文并返回NETDEVTXOK，qdiscrun就无法退出qdiscrestart循环。尽管这可以提高吞吐能力，但某些应用程序可能被迟滞大约10秒钟。 Linux kernel 2.6.x Linux -----...

CVE-2008-5713: Undefined Security Weakness

The qdiscrun function in net/sched/schgeneric.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service soft lockup by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in...

Linux Kernel 2.6.x - 'qdisc_run()' Local Denial of Service

/ source: https://www.securityfocus.com/bid/32985/info The Linux kernel is prone to a local denial-of-service vulnerability. Local attackers can exploit this issue to cause a soft lockup, denying service to legitimate users. Versions prior to Linux kernel 2.6.25 are vulnerable. / include include...

kernel: non-root can trigger cpu_idle soft lockup

Integer overflow in the hrtimerstart function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service panic via a large relative timeout value. NOTE: some of these details are obtained from third party information...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

DoS против Symantec Enterprise Security Manager

Malcrafted request can be used to lockup server and agent...

GLSA-200605-15 : Quagga Routing Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200605-15 Quagga Routing Suite: Multiple vulnerabilities Konstantin V. Gavrilenko discovered two flaws in the Routing Information Protocol RIP daemon that allow the processing of RIP v1 packets carrying no authentication even when...

CVE-2006-1860: Undefined Security Weakness

leaseinit in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of service fcntlsetlease lockup via actions that cause leaseinit to free a lock that might not have been allocated on the stack...

Cisco ONS telnet service DoS

Sending a specially crafted stream of data to a telnet session can cause the session to lock up...

USN-38-1: Linux kernel vulnerabilities

CAN-2004-0814: Vitaly V. Bursov discovered a Denial of Service vulnerability in the "serio" code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

CVE-2003-0540

The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service lock via 1 a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or 2 v...

Postfix 1.1.x - Denial of Service (2)

Postfix 1.1.x - Denial of Service 2 source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that...

Postfix 1.1.x - Denial of Service (1)

// source: https://www.securityfocus.com/bid/8333/info Debian has reported two vulnerabilities in the Postfix mail transfer agent. The first vulnerability, CAN-2003-0468, can allow for an adversary to "bounce-scan" a private network. It has also been reported that this vulnerability can be...