Denial Of Service (DoS)

kernel is vulnerable to denial of service. The ext4 file system implementation contains an integer overflow in ext4escacheextent when lblk + len exceeds 2^32. An attacker is able to crash the kernel by mounting a malicious file system...

Incorrect Default Permissions

npm is vulnerable to authorization bypass. During installation, the file access permissions on the local system are bypassed due to a change in ownership of the /etc/ and /usr directories, allowing a malicious file system access...

Linux Kernel NFS自动加载符号链接拒绝服务漏洞

BUGTRAQ ID: 39044 CVE ID: CVE-2010-1088 Linux Kernel是开放源码操作系统Linux所使用的内核 Linux Kernel的fs/namei.c有时没有跟随NFS自动加载符号链接，用户加载恶意文件系统就会导致拒绝服务。 Linux kernel 2.6.18 - 2.6.34 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...