5657 matches found
CVE-2006-4807
loadertga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808...
PT-2006-1096
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.54 and earlier Description: A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the...
DEBIAN-CVE-2006-5295
Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...
security flaw
The checkconnection function in sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read...
CVE-2006-1516
The checkconnection function in sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:059)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : sysctl.c in the Linux kernel prior to 2.6.14.1 allows local users to cause a Denial of Service kernel oops and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the...
CVE-2006-0457
Race condition in the 1 addkey, 2 requestkey, and 3 keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service crash or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies t...
CVE-2006-0380
A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory...
CVE-2006-0380
FreeBSD CVE-2006-0380 (and CVE-2006-0379) affects 5.4-STABLE and 6.0 kernels. A logic error in computing a buffer length can copy too much data to userland, potentially disclosing portions of kernel memory. Impact is local memory disclosure; no workaround is listed in the advisory. Mitigation: up...
CVE-2006-0145
The CVE-2006-0145 entry concerns the kernfs_xread function in kernfs for NetBSD (versions 1.6–2.1) and OpenBSD 3.8. The issue is improper validation of file offsets against negative 32-bit values that occur due to truncation, enabling local users to read arbitrary kernel memory and potentially ga...
security flaw
The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...
CVE-2005-2492
The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...
CVE-2005-2492
The rawsendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service change hardware state or read from arbitrary memory via crafted input...
CVE-2005-2492
CVE-2005-2492 affects the Linux kernel 2.6 series prior to 2.6.13.1. The raw_sendmsg function can be exploited by a local user to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input. Documented in multiple advisories (e.g., Mandriva MDKSA-2005:235; SU...
CVE-2004-2302
CVE-2004-2302 is a race condition in the Linux kernel’s sysfs_read_file and sysfs_write_file, present in 2.6.10 and earlier. It can let local users read kernel memory and cause a denial of service (crash) by exploiting large offsets in sysfs files. Public advisories (e.g., Debian DSA-922-1) docum...
RHEL 2.1 : dhcpcd (RHSA-2005:603)
An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...
dhcpcd security update
CentOS Errata and Security Advisory CESA-2005:603-01 An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of...
Moderate: Red Hat Security Advisory: dhcpcd security update
An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...