CVE-2011-4112

The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFFTXSKBSHARING flag, which allows local users to cause a denial of service panic by leveraging the CAPNETADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction wit...

PT-2012-1803 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue affects the net subsystem in the Linux kernel, where it does not properly restrict the use of the IFF TX SKB SHARING flag. This allows local users with the CAP NET ADMIN capability to...

Linux Kernel "net/"子系统"af_packet.c"本地信息泄露漏洞

BUGTRAQ ID: 48986 Linux Kernel是Linux操作系统的内核。 Linux Kernel的 "net/"子系统"afpacket.c"在实现上存在本地信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux Kernel "net/"子系统套接字过滤器本地信息泄露漏洞

BUGTRAQ ID: 45064 CVE ID: CVE-2010-4161 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 此问题源于从arg needlock = 0的tcpv4,6rcv函数调用函数skfilter时，套接字当时未能锁定。 Linux kernel 2.6.0-2.6.18 rc7 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux Kernel net/子系统多个本地信息泄露漏洞

BUGTRAQ ID: 44630 Linux Kernel是开放源码操作系统Linux所使用的内核。 在Linux Kernel的net/子系统中net/ax25/afax25.c文件下的ax25getname函数和net/packet /afpacket.c文件下的packetgetnamespkt、packetgetname函数没有正确地初始化某些结构成员便将其拷贝到了用户空间，这可能导致泄漏内核栈内存。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-578-1

Ubuntu Update for Linux kernel vulnerabilities USN-578-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5781.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-578-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.17/20/22 vulnerabilities USN-574-1

Ubuntu Update for Linux kernel vulnerabilities USN-574-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5741.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17/20/22 vulnerabilities USN-574-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

Linux kernel dccp_setsockopt_change() integer overflow

Integer overflow in the dccpsetsockoptchange function in net/dccp/proto.c in the Datagram Congestion Control Protocol DCCP subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service panic via a crafted integer value, related to Change L and Chan...

USN-578-1: Linux kernel vulnerabilities

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. CVE-2006-6058 Alexander Schulze...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-578-1)

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. CVE-2006-6058 Alexander Schulze...

Ubuntu 6.10 / 7.04 / 7.10 : linux-source-2.6.17/20/22 vulnerabilities (USN-574-1)

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. This was only vulnerable in Ubun...

USN-574-1: Linux kernel vulnerabilities

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. This was only vulnerable in Ubun...