fedoraproject fedora core 6 vulnerabilities and exploits

(subscribe to this query)

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness erro...

Qemu Qemu 0.8.2 Fedoraproject Fedora 7 Fedoraproject Fedora Core 6 Debian Debian Linux 3.1 Debian Debian Linux 4.0

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vu...

Fedoraproject Fedora Core 6 Linux Linux Kernel 2.6.18 Redhat Enterprise Linux 5.0

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-e...

Qemu Qemu 0.8.2 Fedoraproject Fedora 8 Fedoraproject Fedora 9 Fedoraproject Fedora Core 6 Opensuse Opensuse 11.0 Opensuse Opensuse 11.1 Debian Debian Linux 3.1 Debian Debian Linux 4.0

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Apache Http Server Fedoraproject Fedora 7 Fedoraproject Fedora Core 6 Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 6.10 Canonical Ubuntu Linux 6.06

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

Fedoraproject Fedora Core 6.0 Redhat Enterprise Linux 4.0 Redhat Enterprise Linux Desktop 4.0 Redhat Linux

1 EDB exploit

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations a...

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Xen Xen Fedoraproject Fedora 35 Fedoraproject Fedora 36 Intel Sgx Dcap Intel Sgx Psw Intel Sgx Sdk Vmware Esxi 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.

1 Github repository

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Xen Xen Fedoraproject Fedora 35 Fedoraproject Fedora 36 Intel Sgx Dcap Intel Sgx Psw Intel Sgx Sdk Vmware Esxi 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Xen Xen Fedoraproject Fedora 35 Fedoraproject Fedora 36 Intel Sgx Dcap Intel Sgx Psw Intel Sgx Sdk Vmware Esxi 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook