349 matches found
CVE-2017-10663
The sanitycheckckpt function in fs/f2fs/super.c in the Linux kernel before version 4.12.4 does not validate the blkoff and segno arrays. This allows an unprivileged, local user to cause a system panic and DoS. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although...
RHEL 7 : kernel (RHSA-2017:2437)
An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
PT-2016-6780
Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.7-rc6 Description The issue allows local users to cause a denial of service, potentially leading to a system panic, or possibly have other unspecified impacts via certain IPv6 socket operations. This is due to a problem...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
A vulnerability in the Linux kernel allows a local user to trigger a system panic by using specially crafted BPF instructions. The BPFSANCNLATTR and BPFSANCNLATTRNEST instructions cause an error in the skrunfilter function from net/core/filter.c...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
A vulnerability in the Linux kernel allows a local user to trigger a system panic by using specially crafted BPF instructions. The BPFSANCNLATTR and BPFSANCNLATTRNEST instructions cause an error in the skrunfilter function from net/core/filter.c...
Privilege escalation
Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service system panic via a crafted application with the system or camera privilege...
CVE-2015-8305
Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service system panic via a crafted application with the system or camera privilege...
CVE-2015-8305: Improper Input Validation
Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service system panic via a crafted application with the system or camera privilege...
FreeBSD -- Linux compatibility layer setgroups(2) system call
Problem Description: A programming error in the Linux compatibility layer setgroups2 system call can lead to an unexpected results, such as overwriting random kernel memory contents. Impact: It is possible for a local attacker to overwrite portions of kernel memory, which may result in a privileg...
Security Advisory - Input Check Vulnerability in Huawei Smart Phone
There is a vulnerability in a Huawei smart phone that does not validate input parameter. The attacker tricks the user to install a malicious application to obtain system or camera privilege and then can exploit the vulnerability to make the product system panic. Vulnerability ID: HWPSIRT-2015-110...
FreeBSD -- Local privilege escalation in IRET handler
Problem Description: If the kernel-mode IRET instruction generates an SS or NP exception, but the exception handler does not properly ensure that the right GS register base for kernel is reloaded, the userland GS segment may be used in the context of the kernel exception handler. Impact: By causi...
PT-2018-2681 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Linux kernel's NFS41+ subsystem. This vulnerability can be exploited when NFS41+ shares are mounted in different network...
Linux Kernel 3.16.3 - Associative Array Garbage Collection Crash (PoC)
/ ---------------------------------------------------------------------------------------------------- cve-2014-3631poc.c The assocarraygc function in the associative-array implementation in lib/assocarray.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which...
Apple Mac OS X Server 10.0 Overload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/306/info A vulnerability in the MacOS X Server may crash it while under heavy load. The vulnerability appears while stress testing a server running the Apache web server and 32 or more process are concurntly doing HTTP GE...
Oracle Linux 4 : kernel (ELSA-2009-1132)
From Red Hat Security Advisory 2009:1132 : Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain...
FreeBSD-SA-12:08.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:08.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer input validation error Category: core Module: kernel Announced: 2012-11-22...
PT-2011-2862 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the nfs4 proc set acl function in the Linux kernel, which stores NFSv4 ACL data in memory allocated by kmalloc but does not properly free it. This can be exploited by...
kernel: ext4: avoid divide by zero when trying to mount a corrupted file system
The ext4fillflexinfo function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ext4 filesystem containing a super block with a large FLEXBG group size aka sloggroupsperflex...
RHEL 4 : kernel (RHSA-2009:1132)
Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...