linux linux kernel 2.4.33.4 vulnerabilities and exploits

(subscribe to this query)

Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function o...

The netlink subsystem in the Linux kernel 2.4.x prior to 2.4.37.6 and 2.6.x prior to 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) t...

The sysctl functionality (sysctl.c) in Linux kernel prior to 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and ...

1 EDB exploit

The RBAC functionality in grsecurity prior to 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.

Grsecurity Grsecurity Kernel Patch 2.6.24.4 Grsecurity Grsecurity Kernel Patch 2.4.33 Grsecurity Grsecurity Kernel Patch 2.4.33.2 Grsecurity Grsecurity Kernel Patch 2.4.33.3 Grsecurity Grsecurity Kernel Patch 2.4.33.4 Grsecurity Grsecurity Kernel Patch 2.4.34 Grsecurity Grsecurity Kernel Patch 2.6.18

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 prior to 2.6.18.6, and 2.6.19.x, allow remote malicious users to cause a denial of service (crash) and possibly e...

The asn1 implementation in (a) the Linux kernel 2.4 prior to 2.4.36.6 and 2.6 prior to 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote maliciou...

The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 up to and including 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL poi...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook