Debian DSA-1787-1 : linux-2.6.24 - denial of service/privilege escalation/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4307 Bryn M. Reeves reported a denial of service in the NFS filesystem...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1787-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755 CVE ID：CVE-2009-0663 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg存在基于堆的缓冲区溢出，远程攻击者可以利用漏洞执行任意代码。 使用pggetline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux...

Ubuntu 8.10 : linux vulnerabilities (USN-715-1)

Hugo Dias discovered that the ATM subsystem did not correctly manage socket counts. A local attacker could exploit this to cause a system hang, leading to a denial of service. CVE-2008-5079 It was discovered that the inotify subsystem contained watch removal race conditions. A local attacker coul...

WeeChat IRC消息远程拒绝服务漏洞

BUGTRAQ ID: 34148 CVECAN ID: CVE-2009-0661 WeeChat（Wee Enhanced Environment for Chat）是一款高效的轻型IRC聊天客户端。 WeeChat IRC客户端没有正确地验证包含有某些颜色代码的IRC消息。如果远程攻击者发送了特制的PRIVMSG命令的话，就会导致越界读取内部的颜色数组，客户端可能会崩溃。 Flashtux WeeChat 0.2.6.0 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1744-1）以及相应补丁: DSA-1744-1：New weechat...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

USN-715-1: Linux kernel vulnerabilities

Hugo Dias discovered that the ATM subsystem did not correctly manage socket counts. A local attacker could exploit this to cause a system hang, leading to a denial of service. CVE-2008-5079 It was discovered that the inotify subsystem contained watch removal race conditions. A local attacker coul...

[SECURITY] [DSA 1713-1] New rt2500 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1713-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq -...

Design/Logic Flaw

The pariscshowstack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service system crash via vectors associated with an attempt to unwind a stack that contains userspace addresses...

CVE-2008-5395

The pariscshowstack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service system crash via vectors associated with an attempt to unwind a stack that contains userspace addresses...

CVE-2008-5395

The pariscshowstack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service system crash via vectors associated with an attempt to unwind a stack that contains userspace addresses...

CVE-2008-5395

The pariscshowstack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service system crash via vectors associated with an attempt to unwind a stack that contains userspace addresses...

CVE-2008-5395

CVE-2008-5395 is a Linux kernel vulnerability affecting PA-RISC where parisc_show_stack in arch/parisc/kernel/traps.c can be triggered by unwinding a stack containing userspace addresses, allowing local users to crash the system (denial of service). The issue is fixed in the 2.6.28-rc7 kernel (an...

MPlayer sdpplin_parse()函数RTSP整数溢出漏洞

BUGTRAQ ID: 28851 CVECAN ID: CVE-2008-1558 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的stream/realrtsp/sdpplin.c文件中的sdpplinparse函数存在整数溢出漏洞： sdpplinparsestream desc-streamid=atoibuf; spplinparse desc-streamstream-streamid=stream; 如果用户所打开的媒体文件中包含有超长的StreamCount SDP参数的话，就可以触发这个溢出，导致执行任意指令。 MPlayer 1....

HP-UX PHSS_37273 : s700_800 11.X OV NNM7.51 PA-RISC Intermediate Patch 18

s700800 11.X OV NNM7.51 PA-RISC Intermediate Patch 18 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to create a Denial of Service DoS ...

Debian Security Advisory DSA 475-1 (kernel-image-2.4.17-hppa)

The remote host is missing an update to kernel-image-2.4.17-hppa announced via advisory DSA 475-1. OpenVAS Vulnerability Test $Id: deb4751.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 475-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 475-1 (kernel-image-2.4.17-hppa)

The remote host is missing an update to kernel-image-2.4.17-hppa announced via advisory DSA 475-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...