kernel: Information leak when handling NM entries containing NUL

A vulnerability was found in the Linux kernel. Payloads of NM entries are not supposed to contain NUL. When such entry is processed, only the part prior to the first NUL goes into the concatenation i.e. the directory entry name being encoded by a bunch of NM entries. The process stops when the...

SQLite Tempdir Selection Vulnerability

Vulnerability Details Affected Vendor: SQLite/Hwaci Affected Product: SQLite Affected Version: All versions prior to 3.13.0 Platform: UNIX, GNU/Linux CWE Classification: CWE-379: Creation of Temporary File in Directory with Incorrect Permissions Impact: Data Leakage Attack vector: Local 2...

FuseISO Stack Buffer Overflow Vulnerability

FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. A stack buffer overflow vulnerability exists in the 'isofsrealreaddir' function in the isofs.c file in FuseISO 20070708 and earlier...

DEBIAN-CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

UBUNTU-CVE-2015-8837

Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...

FreeBSD NFS server memory corruption

It's possible to call readdir on plain file...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4472)

This kernel update fixes the following security problems : - It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This affects x8664 platforms with kernel 2.4.x and 2.6.x before 2.6.22.7 only. CVE-2007-4573 - An information disclosure vulnerability ...

kernel: proc: signedness issue in next_pidmap()

Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...

kernel: proc: signedness issue in next_pidmap()

Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...

kernel: proc: signedness issue in next_pidmap()

Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...

Perl Denial of Service Vulnerability (Windows)

The host is installed with Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbperldosvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Perl Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...

CVE-2011-0761

Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...

Null pointer dereference

Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...

CVE-2011-0761

Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...

Integer overflow

Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...

CVE-2011-1593

CVE-2011-1593 affects the Linux kernel before 2.6.38.4, where multiple integer overflows in the next_pidmap function (kernel/pid.c) allow a local user to crash the system via crafted getdents or readdir calls. The connected advisories confirm the affected component and the root cause (integer ove...

PT-2011-1076 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.4 Description: The issue is related to multiple integer overflows in the next pidmap function in kernel/pid.c, which can cause a denial of service system crash via crafted system calls, specifically 1...

Stack overflow

Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System HFS filesystem, related to the hfsreaddir function in fs/hfs/dir.c...

Null pointer to an inode in a dentry can cause an oops in sysfs_readdir

The sysfsreaddir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux RHEL 4.5 and other distributions, allows users to cause a denial of service kernel OOPS by dereferencing a null pointer to an inode in a dentry...

Null pointer to an inode in a dentry can cause an oops in sysfs_readdir

The sysfsreaddir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux RHEL 4.5 and other distributions, allows users to cause a denial of service kernel OOPS by dereferencing a null pointer to an inode in a dentry...