Amazon Linux AMI : kernel (ALAS-2017-814)

Possible double free in stcpsendmsg incorrect fix for CVE-2017-5986 : It was found that the code in net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the mmap extension’s MAPNOFAULT flag in the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a local attacker to cause a kernel panic by using a large value...

Ubuntu Linux kernel package integer overflow vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, of which the Linux kernel package is a component. An integer overflow vulnerability exists in version 3.16.0-28 of the Linux kernel package on the Ubuntu 14.04 LTS release. Due to the program...

Medium: kernel

Issue Overview: Possible double free in stcpsendmsg incorrect fix for CVE-2017-5986: It was found that the code in net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial...

Linux 3.16.0-28 Integer Overflow

Title: Linux kernel 3.16.0-28 - Integer overflow + Credits / Discovery: Nassim Asrir + Author Email: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: CVE-2017-7286 Vendor: =============== https://www.kernel.org/ Vulnerability Type:...

Linux Kernel 3.11 < 4.8 0 - 'SO_SNDBUFFORCE' / 'SO_RCVBUFFORCE' Local Privilege Escalation

// CAPNETADMIN - root LPE exploit for CVE-2016-9793 // No KASLR, SMEP or SMAP bypass included // Affected kernels: 3.11 - 4.8 // Tested in QEMU only // https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 // // Usage: // gcc -pthread exploit.c -o exploit // chown guest:guest exploit...

PT-2019-5758 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.20.14 Description: The issue is related to the expand downwards function in the Linux kernel, which lacks a check for the mmap minimum address. This makes it easier for attackers to exploit kernel NULL pointer...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

Code injection

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

Integer overflow

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6522

CVE-2016-6522 concerns OpenBSD 5.9 kernel code, where an integer overflow in the uvm_map_isavail function (uvm/uvm_map.c) can be triggered by a crafted mmap call. This may cause a denial of service via a kernel panic due to the new mapping overlapping an existing mapping. Elevation or remote impa...

CVE-2016-6522

Integer overflow in the uvmmapisavail function in uvm/uvmmap.c in OpenBSD 5.9 allows local users to cause a denial of service kernel panic via a crafted mmap call, which triggers the new mapping to overlap with an existing mapping...

CVE-2016-6239

The mmap extension MAPNOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service kernel panic and crash via a large size value...

CVE-2016-6239

CVE-2016-6239 affects OpenBSD 5.8 and 5.9. The mmap extension __MAP_NOFAULT can be triggered by a large size value to cause a denial of service via kernel panic/crash. Impact is availability disruption as stated. No explicit exploitation details or remediation are provided in the connected docume...

CVE-2017-5669

The doshmat function in ipc/shm.c in the Linux kernel, through 4.9.12, does not restrict the address calculated by a certain rounding operation. This allows privileged local users to map page zero and, consequently, bypass a protection mechanism that exists for the mmap system call. This is...

CVE-2017-5669

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget a...

CVE-2017-5669

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget a...

DEBIAN-CVE-2017-5669

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget a...