39 matches found
CVE-2010-1086
The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...
CVE-2010-1086
The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service infinite loop via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE...
Linux Kernel dvb_net_ule()函数远程拒绝服务漏洞
BUGTRAQ ID: 38479 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ULE解封装处理代码中存在拒绝服务漏洞,如果远程用户所发送的MPEG2-TS帧的负载指针为182或183,就会导致ULE SNDU的接收程序陷入死循环。 Linux kernel 2.6.x 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1
Ubuntu Update for Linux kernel vulnerabilities USN-489-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-489-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerability (USN-489-1)
A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...
USN-489-1: Linux kernel vulnerabilities
A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...
Code injection
The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...
CVE-2007-3721
The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...
CVE-2007-3721
The CVE-2007-3721 entry concerns the FreeBSD kernel’s ULE process scheduler, which favors “interactive” processes that issue voluntary sleeps. The underlying issue is that such prioritization can lead to local users causing CPU denial of service (PARTIAL availability impact) as described in the r...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:182)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Stephane Eranian discovered an issue with permon2.0 where, under certain circumstances, the perfmonctl system call may not correctly manage the file descriptor reference count, resulting in the system possibly...
Linux Kernel ULE包处理远程拒绝服务漏洞
Linux kernel是一款开放源代码的操作系统。 Linux kernel的ULE解封装代码存在缺陷,远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 攻击者发送畸形的使用SNDU长度为0的ULEUnidirectional Lightweight Encapsulation RFC 4326包,可导致机器停止响应,造成拒绝服务攻击。 Linux kernel 2.6.17 .8 可采用如下补丁: --- diff -uprN linux-2.6.17.8/drivers/media/dvb/dvb-core/dvbnet.c...
Linux Kernel畸形ULE报文处理远程拒绝服务漏洞
Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux的ULE(单向轻型封装RFC 4326)拆封代码存在一个漏洞,远程攻击者可能利用此漏洞对接收处理的服务器造成拒绝服务攻击。 攻击者可以通过发送SNDU长度为0的ULE报文导致漏洞的触发。 受影响系统: Linux kernel 2.6.x = 2.6.17.7 不受影响系统: Linux kernel 2.6.17.8 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.kernel.org/ diff -uprN...
[SA21820] Linux Kernel ULE Packet Handling Denial of Service
---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...
Linux kernel ULE packet DoS
Crash on receiving packet with zero SNDU length...
CVE-2006-4623
The Unidirectional Lightweight Encapsulation ULE decapsulation component in dvb-core/dvbnet.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service crash via an SNDU length of 0 in a ULE packet...
CVE-2006-4623
The Unidirectional Lightweight Encapsulation ULE decapsulation component in dvb-core/dvbnet.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service crash via an SNDU length of 0 in a ULE packet...
CVE-2006-4623
The vulnerability CVE-2006-4623 affects the Linux kernel DVB ULE decapsulation path: Unidirectional Lightweight Encapsulation (ULE) in dvb-core/dvb_net.c of the kernel 2.6.17.8. A remote attacker can cause a denial of service (crash) by sending a ULE packet with an SNDU length of 0. Public adviso...
CVE-2006-4623
The Unidirectional Lightweight Encapsulation ULE decapsulation component in dvb-core/dvbnet.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service crash via an SNDU length of 0 in a ULE packet...