68 matches found
openSUSE Security Update : samba (openSUSE-2016-881)
"This update for samba fixes the following issues : - Prevent client-side SMB2 signing downgrade; CVE-2016-2119; bso11860 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-881. The...
kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.
It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service use-after-free and system crash via a crafted sendmsg system call...
kernel: SCTP race condition allows list corruption and panic from userlevel
A race condition flaw was found in the way the Linux kernel's SCTP implementation handled Address Configuration lists when performing Address Configuration Change ASCONF. A local attacker could use this flaw to crash the system via a race condition triggered by setting certain ASCONF options on a...
kernel: SCTP race condition allows list corruption and panic from userlevel
A race condition flaw was found in the way the Linux kernel's SCTP implementation handled Address Configuration lists when performing Address Configuration Change ASCONF. A local attacker could use this flaw to crash the system via a race condition triggered by setting certain ASCONF options on a...
kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()
A flaw was found in the way the pppol2tpsetsockopt and pppol2tpgetsockopt functions in the Linux kernel's PPP over L2TP implementation handled requests with a non-SOLPPPOL2TP socket option level. A local, unprivileged user could use this flaw to escalate their privileges on the system...
kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()
A flaw was found in the way the pppol2tpsetsockopt and pppol2tpgetsockopt functions in the Linux kernel's PPP over L2TP implementation handled requests with a non-SOLPPPOL2TP socket option level. A local, unprivileged user could use this flaw to escalate their privileges on the system...
FreeBSD 3.x/4.0/5.0,NetBSD 1.4.1/1.4.2,OpenBSD 2.x Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/1296/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD. It is believed that all versions of these operating systems are vulnerable. The vulnerability is related to setting socket options...
FreeBSD <= 5.0,NetBSD <= 1.4.2,OpenBSD <= 2.7 setsockopt() Dos
No description provided by source. source: http://www.securityfocus.com/bid/622/info A denial of service attack exists that affects FreeBSD, NetBSD and OpenBSD, and potentially other operating systems based in some part on BSD. It is believed that all versions of these operating systems are...
kernel: net: slab corruption due to improper synchronization around inet->opt
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service slab corruption and system crash by sending packets to an application that sets socket options during the handling of network traffic...
DEBIAN-CVE-2012-3552
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service slab corruption and system crash by sending packets to an application that sets socket options during the handling of network traffic...
UBUNTU-CVE-2012-3552
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service slab corruption and system crash by sending packets to an application that sets socket options during the handling of network traffic...
kernel: net: slab corruption due to improper synchronization around inet->opt
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service slab corruption and system crash by sending packets to an application that sets socket options during the handling of network traffic...
PT-2012-4803 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0 Description: A race condition exists in the IP implementation of the Linux kernel, potentially allowing remote attackers to cause a denial of service. This can be achieved by sending packets to an applicatio...
Linux kernel-2.6.18-6 x86 Local Root Exploit
No description provided by source. include include include include include include include include define NUMCPUS 8 define ATM "/proc/net/atm/avc" int mainvoid char err, adurit2000; int i, ret, sock, proc; struct atmqos dj; struct sockaddratmsvc addr; sock = socketPFATMSVC, SOCKDGRAM, 0; memset&d...
CVE-2011-1132
The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service NULL pointer dereference and reboot via vectors involving socket options...
Null pointer dereference
The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service NULL pointer dereference and reboot via vectors involving socket options...
CVE-2011-1132
The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service NULL pointer dereference and reboot via vectors involving socket options...
CVE-2011-1132
The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service NULL pointer dereference and reboot via vectors involving socket options...
CVE-2011-1132: Undefined Security Weakness
The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service NULL pointer dereference and reboot via vectors involving socket options...
PT-2011-2896
Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.8 Description The issue concerns the IPv6 implementation in the kernel, allowing local users to cause a denial of service through specific vectors involving socket options, resulting in a NULL pointer dereferenc...