Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

high availability linux project vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2006-3121
The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux prior to 1.2.5, and 2.0 prior to 2.0.7, allows remote malicious users to cause a denial of service (crash) via the length parameter in a heartbeat message.
High Availability Linux Project Heartbeat 2.0.2High Availability Linux Project Heartbeat 2.0.3High Availability Linux Project Heartbeat 2.0.4High Availability Linux Project Heartbeat 2.0.5High Availability Linux Project Heartbeat 2.0.6High Availability Linux Project Heartbeat 1.2.3High Availability Linux Project Heartbeat 1.2.4High Availability Linux Project Heartbeat 2.0.1
2.1
CVSSv2
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
High Availability Linux Project Heartbeat 1.2.3
4.9
CVSSv2
CVE-2012-1090
The cifs_lookup function in fs/cifs/dir.c in the Linux kernel prior to 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
Linux Linux KernelRedhat Enterprise Mrg 2.0Suse Linux Enterprise Desktop 11Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Server 11
4.9
CVSSv2
CVE-2012-0879
The I/O implementation for block devices in the Linux kernel prior to 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.
Linux Linux KernelCanonical Ubuntu Linux 10.04Debian Debian Linux 6.0Suse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise High Availability Extension 11
7.2
CVSSv2
CVE-2012-1097
The regset (aka register set) feature in the Linux kernel prior to 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GET...
Linux Linux KernelRedhat Enterprise Linux 4.0Redhat Enterprise Mrg 2.0Suse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise High Availability Extension 11
4.4
CVSSv2
CVE-2010-1437
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and previous versions allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session co...
Linux Linux Kernel 2.6.34Linux Linux KernelOpensuse Opensuse 11.1Suse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise High Availability Extension 11Debian Debian Linux 5.0
1.9
CVSSv2
CVE-2010-2803
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel prior to 2.6.27.53, 2.6.32.x prior to 2.6.32.21, 2.6.34.x prior to 2.6.34.6, and 2.6.35.x prior to 2.6.35.4 allows local users to obtain potentially sensitive i...
Linux Linux KernelDebian Debian Linux 5.0Suse Linux Enterprise Desktop 11Opensuse Opensuse 11.1Suse Linux Enterprise Server 11Opensuse Opensuse 11.3Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Real Time 11
7.2
CVSSv2
CVE-2010-2959
Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel prior to 2.6.27.53, 2.6.32.x prior to 2.6.32.21, 2.6.34.x prior to 2.6.34.6, and 2.6.35.x prior to 2.6.35.4 allows malicious users to execute arbitrary code or cause a denial...
Linux Linux KernelFedoraproject Fedora 12Debian Debian Linux 5.0Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Opensuse Opensuse 11.3Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Real Time 11
7.2
CVSSv2
CVE-2010-2798
The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel prior to 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibl...
Linux Linux KernelVmware Esx 4.1Vmware Esx 4.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Debian Debian Linux 5.0Avaya Aura System Manager 6.0Avaya Aura System Manager 5.2Avaya Aura Communication Manager 5.2Avaya Voice Portal 5.1Avaya Voice Portal 5.0Avaya Aura System Platform 1.1Avaya Aura System Platform 6.0Avaya Aura System Manager 6.1Avaya Aura System Manager 6.1.1Avaya Aura Session Manager 1.1Avaya Aura Session Manager 5.2Avaya Aura Session Manager 6.0
5
CVSSv2
CVE-2019-15903
In libexpat prior to 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
Libexpat Project LibexpatPython Python
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook