Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

dan rosenberg vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-4158
The sk_run_filter function in net/core/filter.c in the Linux kernel prior to 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensiti...
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4163
The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel prior to 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.
Linux Linux KernelSuse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4162
Multiple integer overflows in fs/bio.c in the Linux kernel prior to 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4076
The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and previous versions does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...
Linux Linux Kernel
7.8
CVSSv3
CVE-2010-2960
The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and previous versions expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly h...
Linux Linux KernelCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Suse Suse Linux Enterprise Desktop 11Suse Suse Linux Enterprise Server 11
NA
CVE-2010-3705
The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel prior to 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote malicious users to cause a denial of service (memory corruption and panic) via a crafted value in the las...
Linux Linux KernelFedoraproject Fedora 13Debian Debian Linux 5.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 6.06
NA
CVE-2010-4077
The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and previous versions does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT...
Linux Linux Kernel
NA
CVE-2010-4242
The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) v...
Linux Linux Kernel 2.6.36
NA
CVE-2010-4175
Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause a denial of service (crash) and possibly trigger memory corruption via a crafted Reliable Datagram Sockets (RDS) request, a different vulnerability than CVE-201...
Linux Linux Kernel 2.6.35
7.5
CVSSv3
CVE-2010-4251
The socket implementation in net/core/sock.c in the Linux kernel prior to 2.6.34 does not properly manage a backlog of received packets, which allows remote malicious users to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstr...
Linux Linux KernelVmware Esx 4.1Vmware Esx 4.0Redhat Enterprise Linux 4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook