Debian DSA-1653-1 : linux-2.6 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6716 Joe Jin reported a local denial of service vulnerability that allows...

SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

Null pointer dereference

Unspecified vulnerability in the strfreectty function in the Special File System SPECFS in Sun Solaris 8 through 10 allows local users to cause a denial of service system panic, related to passing a NULL pointer to the pgsignal function...

Code injection

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

CVE-2007-4495 concerns the Solaris 10 ata disk driver on x86, with the impact described as a local denial of service via an unspecified ioctl function (Bug 6433124). Connected documents indicate mitigations in Solaris ATA/DT driver updates, e.g., Solaris Update for ata Driver 117122-03 and relate...

CVE-2007-4495

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

Code injection

Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service system panic via unspecified ioctl functions, aka Bug 6433123...

CVE-2007-4492

CVE-2007-4492 describes multiple unspecified vulnerabilities in the Sun Solaris ata disk driver on x86 (Solaris 8/9/10) that can cause a local denial of service via unspecified ioctl calls. Connected documents reference Solaris updates for the ata driver (e.g., 117122-03 and 109798-04) as remedia...

Race condition

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

CVE-2007-0914

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

Sun Solaris畸形ICMP报文远程拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 ICMP报文处理过程实现上存在安全漏洞，远程非特权用户可能利用此漏洞导致拒绝服务（DoS）。 如果触发了上述漏洞，系统可能变得忙碌，栈追踪类似于： ip:illrefrele+0x80x0, 0x0, 0x0, 0x1010 ip:ipoutput+0x149c0x0?, 0x6000864f2c0?, 0x60001bcede0?, , 0x2 ip:ipwput0x60001bcede0, 0x600053ac140 - frame recycled...

Mac OS X fpathconf() DoS

fpathconf call for unsupported file type causes system panic...

CVE-2006-4139

Race condition in Sun Solaris 10 allows attackers to cause a denial of service system panic via unspecified vectors related to ifconfig and either netstat or SNMP queries...

CVE-2006-4117

The squeuedrain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service "bad trap" and system panic by opening and closing a large number of TCP connections "heavy TCP/IP loads". NOTE: the original report specifies the function na...

Sun Solaris DoS

System panic in drainsqueue on large number of TCP connections...

CVE-2006-3468

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...

CVE-2006-3728

Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 118844-29 on x86 and without patch 118833-11 118855-08 allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic,...

CVE-2006-3468

CVE-2006-3468 affects the Linux kernel 2.6.x when NFS and EXT3 are used. A remote attacker can trigger a denial of service by sending a crafted UDP packet containing a V2 lookup procedure that specifies a bad file handle (inode number). This triggers an error and causes the exported directory to ...

CVE-2006-3468

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...

CentOS 4 : kernel (CESA-2005:808)

Updated kernel packages that fix several security issues and a page attribute mapping bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...