CVE-2012-2133

Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service system crash or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of...

CVE-2011-1477

Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service heap memory corruption or possibly gain privileges by leveraging write access to /dev/sequencer...

PT-2012-3829 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.4.5 Description: The issue is related to the sock alloc send pskb function in the Linux kernel, which does not properly validate a certain length value. This can be exploited by local users to cause a denial o...

CVE-2012-0044

Integer overflow in the drmmodedirtyfbioctl function in drivers/gpu/drm/drmcrtc.c in the Direct Rendering Manager DRM subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service memory corruption via a crafted ioctl call...

glibc: Improper encoding of names with certain special character in utilities for writing to mtab table

The encodename macro in misc/mntentr.c in the GNU C Library aka glibc or libc6 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service mtab corruption, or possibly modify mount...

PT-2011-4397

Name of the Vulnerable Software and Affected Versions OpenTTD versions prior to 1.1.3 Description The issue is related to multiple buffer overflows that can be triggered by local users. This can happen through either a crafted BMP file with RLE compression or by using crafted dimensions in a BMP...

CVE-2010-4656

The iowarriorwrite function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report...

CVE-2011-2344

Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com...

Ubuntu Update for pam USN-1140-1

Ubuntu Update for Linux kernel vulnerabilities USN-1140-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11401.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for pam USN-1140-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

kernel: xen: improper upper boundary check in get_free_port() function

The getfreeport function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vectors involving a new event channel port...

PT-2012-1530 · Qemu +1 · Qemu-Kvm +1

Name of the Vulnerable Software and Affected Versions: qemu-kvm version 0.14.0 Description: The issue is related to multiple heap-based buffer overflows in the virtio-blk driver. This can be exploited by local guest users to cause a denial of service, potentially leading to a guest crash, and may...

CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data...

CVE-2011-0724

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges...

PT-2011-2452

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 8.x through 8.2.5 Adobe Reader and Acrobat versions 9.x through 9.4.1 Adobe Reader and Acrobat versions 10.x through 10.0.0 Description The issue is related to weak permissions for unspecified files, which...

CVE-2010-4160

Multiple integer overflows in the 1 pppol2tpsendmsg function in net/l2tp/l2tpppp.c, and the 2 l2tpipsendmsg function in net/l2tp/l2tpip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service heap memory corruption and pani...

PT-2011-1465 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: The issue is related to multiple integer overflows in the PPPoL2TP and IPoL2TP implementations. Specifically, the pppol2tp sendmsg function in net/l2tp/l2tp ppp.c and the l2tp ip sendmsg...

PT-2010-5159

Name of the Vulnerable Software and Affected Versions Eucalyptus versions 2.0.0 through 2.0.1 Description The issue concerns the password reset feature in the administrator interface, which fails to perform authentication. This allows remote attackers to send password reset requests for other...

PT-2010-5403 · Vmware · Vmware Server +3

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.1.2 build 301547 VMware Player versions 3.1.x through 3.1.2 build 301547 VMware Server version 2.0.2 VMware Fusion versions 3.1.x through 3.1.2 build 332100 Description: A race condition exists in the...

Cryptographic Issues

Overview Affected versions of this package are vulnerable to Cryptographic Issues. MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain...

krb5: multiple checksum handling vulnerabilities (MITKRB5-SA-2010-007)

MIT Kerberos 5 aka krb5 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via 1 an unkeyed checksum, 2 an unkeyed PAC checksum, or 3 a KrbFastArmoredRe...