103 matches found
PT-2015-4025 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.13 Description: The issue is related to the filesystem implementation in the Linux kernel, which uses an inappropriate locking approach when performing certain operations on lists of files. This can be exploit...
PT-2013-5076 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.13 Description: The issue is related to the udp6 ufo fragment function in the Linux kernel, which does not properly perform a size comparison before inserting a fragment header when UDP Fragmentation Offload U...
php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...