356 matches found
dos flaws in open-iscsi (CVE-2007-3100)
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types
Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...
OpenBSD semaphore分配拒绝服务漏洞
OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD内核实现上存在漏洞，如果本地攻击者分配了多于默认数目的sempahore的话，就会导致内核忙碌。 OpenBSD OpenBSD 3.9 OpenBSD OpenBSD 3.8 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/012sem.patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/007sem.patch...
MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:220 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.2 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...
CVE-2005-2098
The CVE-2005-2098 issue affects the Linux 2.6 kernel up to but before 2.6.12.5, where the KEYCTL_JOIN_SESSION_KEYRING error path fails to release the session management semaphore. This can allow local users or remote attackers to cause a denial of service (semaphore hang) by creating a new sessio...
USN-169-1: Linux kernel vulnerabilities
David Howells discovered a local Denial of Service vulnerability in the key session joining function. Under certain user-triggerable conditions, a semaphore was not released properly, which caused processes which also attempted to join a key session to hang forever. This only affects Ubuntu 5.04...
Linux kernel keyring management DoS
System crash on attempt to delete uninstantiated keyring. Semaphore leakage on KEYCTLJOINSESSIONKEYRING operation...
security flaw
Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...
CVE-2005-0937
Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...
CVE-2005-0937
Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...
PT-2005-1964 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.x Description: The issue is related to some futex functions in futex.c, which perform get user calls while holding the mmap sem semaphore. This could allow local users to cause a deadlock condition in do page fault b...
OpenBSD semaphores DoS
DoS on large number of sequential calls to semop with differen semids...
OpenBSD 3.33.4 - semctlsemop Local Unexpected Array Indexing
OpenBSD 3.33.4 - semctlsemop Local Unexpected Array Indexing // source: https://www.securityfocus.com/bid/9086/info A local OpenBSD kernel vulnerability has been discovered when handling the semctl and semop system calls. The problem specifically occurs due to improper sanity checking before...
Integer overflow in OpenBSD kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local security bug in OpenBSD semaphore handling Product: OpenBSD kernel 3.3-release, -current before 10/09/2003 Impact: Root may bypass securelevel Bug class: Integer overflow Vendor notified: Yes Fix available: Yes Details: An integer overflow...