Ubuntu 4.10 / 5.04 : linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities (USN-178-1)

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

SUSE-SA:2005:068: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:068 kernel. The Linux kernel was updated to fix several security problems and several bugs, listed below: Security fixes: - CVE-2005-3783: A check in ptrace2 handling that finds out if a process is attaching to itself was incorrec...

CVE-2005-3805

A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service deadlock involving process CPU timers...

CVE-2005-3805

A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service deadlock involving process CPU timers...

CVE-2005-3805

A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service deadlock involving process CPU timers...

CVE-2005-3805

CVE-2005-3805 describes a locking issue in the POSIX timer cleanup on exit for Linux kernel 2.6.10–2.6.14 on SMP systems, enabling local users to cause a denial of service (deadlock) related to process CPU timers. Affected products/versions are Linux kernel 2.6.10–2.6.14 on SMP; the root cause is...

CVE-2005-3274

Race condition in ipvsconnflush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service null dereference by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is...

CVE-2005-3274

Race condition in ipvsconnflush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service null dereference by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is...

security flaw

Race condition in ipvsconnflush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service null dereference by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is...

security flaw

Race condition in ipvsconnflush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service null dereference by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is...

CVE-2002-1983

The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service hang and possibly execute arbitrary code by creating multiple timers with a 1-ms tick...

CVE-2002-1983

CVE-2002-1983 affects QNX RTOS 6.1.0. The timer implementation is vulnerable: by creating multiple timers with a 1‑ms tick, local users can cause a denial of service (hang) and potentially execute arbitrary code. Impact described as local, with partial availability impact. No explicit remediation...

CVE-2005-0356

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers PAWS with the timestamps option enabled allow remote attackers to cause a denial of service connection loss via a spoofed packet with a large timer value, which causes the host to discard later packets because they appe...

Important: Red Hat Security Advisory: Updated IA64 kernel packages address security vulnerabilities, bugfixes

Updated kernel packages that address several security vulnerabilites, fix a number of bugs, and update various drivers are now available. The Linux kernel handles the basic functions of the operating system. A flaw in bounds checking in the dobrk function in the Linux kernel versions 2.4.22 and...

CVE-2002-1983

The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service hang and possibly execute arbitrary code by creating multiple timers with a 1-ms tick...

QNX timer DoS

If user mode apllicatation creates a number of timer system hangs...

QNX 6.1 TimeCreate weakness

I've found bug in QNX-6.1 timer implementation. After creating some number at least 2 of timers with 1 ms tick system hangs. Please consider attached source code. Code can be executed by unprivilegged users. Pawel Pisarczyk ------------------------ IMMOS - IMMOrtal Systems...

QNX 6.1 - 'TimeCreate' Local Denial of Service

// source: https://www.securityfocus.com/bid/6114/info A denial of service vulnerability has been discovered in QNX. It has been reported that it is possible for unprivileged users to cause QNX systems to stop responding, by creating multiple timers containing specific characteristics. It should ...