Debian DSA-1489-1 : iceweasel - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul...

Linux kernel hpet timers DoS

No description provided...

Ubuntu 5.04 / 5.10 / 6.06 LTS : linux-source-2.6.10/-2.6.12/-2.6.15 vulnerabilities (USN-311-1)

A race condition was discovered in the doaddcounters functions. Processes which do not run with full root privileges, but have the CAPNETADMIN capability can exploit this to crash the machine or read a random piece of kernel memory. In Ubuntu there are no packages that are affected by this, so th...

CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

CVE-2006-7051

The CVE-2006-7051 vulnerability concerns the Linux kernel 2.6.x, specifically the sys_timer_create function in posix-timers.c. Local users can create a large number of posix timers, which are allocated in kernel memory but not counted as part of the process’s memory, leading to memory exhaustion ...

CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

Concurrency strikes MSIE (potentially exploitable msxml3 flaws)

A while ago, apparently angry with Larry Seltzer, I penned a quick write-up on the possible issues with race conditions triggered by asynchronous browser events such as JavaScript timers colliding with synchronous content rendering: http://seclists.org/vulnwatch/2006/q3/0023.html This is in...

USN-311-1: Linux kernel vulnerabilities

A race condition was discovered in the doaddcounters functions. Processes which do not run with full root privileges, but have the CAPNETADMIN capability can exploit this to crash the machine or read a random piece of kernel memory. In Ubuntu there are no packages that are affected by this, so th...

Multiple linux kernels vulnerabilities

NAt feature DoS, sysgetthreadarea kernel memory content leak, ipvsconnflush race conditions, Posix timers DoS, rosertioctl DoS...

CVE-2005-3805

A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service deadlock involving process CPU timers...

CVE-2005-3481

Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities...

CVE-2005-3481

CVE-2005-3481 affects Cisco IOS versions 12.0–12.4, where a heap-based buffer overflow in the system timers can allow a remote attacker to execute arbitrary code. The vulnerability stems from the timer subsystem, enabling remote code execution and potential device compromise without user interact...

CVE-2005-3481

Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities...

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== IOS Heap-based Overflow Vulnerability in System Timers ====================================================== Document ID: 68064 Revision 1.0 For Public Release 2005 November 2 1600 UTC GMT -...

IOS Heap-based Overflow Vulnerability in System Timers

...

CVE-2005-3271

Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could allow a large number of multiple local users to cause a denial of service by using more posix-timers than specified by the quota for a single user...

CVE-2005-3271

CVE-2005-3271 affects the Linux kernel 2.6 series. Description and multiple advisories (SUSE, Debian, Mandriva) show exec() does not properly clear posix-timers in multi-threaded environments, causing a resource leak. This can enable a large number of local users to cause a denial of service by e...

QNX 6.1 - TimeCreate Local Denial of Service

QNX 6.1 - TimeCreate Local Denial of Service // source: https://www.securityfocus.com/bid/6114/info A denial of service vulnerability has been discovered in QNX. It has been reported that it is possible for unprivileged users to cause QNX systems to stop responding, by creating multiple timers...