Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 2.6.28.8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0787
The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 prior to 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions...
Linux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.28.7Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28
NA
CVE-2011-4348
Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel prior to 2.6.29 allows remote malicious users to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.
Linux Linux KernelLinux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.28.9Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.28.7Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28
NA
CVE-2011-4324
The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel prior to 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
Linux Linux KernelLinux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.28.3Linux Linux Kernel 2.6.28.9Linux Linux Kernel 2.6.28.6Linux Linux Kernel 2.6.28.7Linux Linux Kernel 2.6.28.1Linux Linux Kernel 2.6.28
NA
CVE-2009-1298
The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions prior to 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote malicious users to cause a denial of service (NULL pointer dereference and han...
Linux Linux Kernel 2.6.28Linux Linux Kernel 2.6.29Linux Linux Kernel 2.6.31Linux Linux Kernel 2.6.29.3Linux Linux Kernel 2.6.32Linux Linux Kernel 2.6.31.3Linux Linux Kernel 2.6.30Linux Linux Kernel 2.6.31.4Linux Linux Kernel 2.6.31.6Linux Linux Kernel 2.6.28.4Linux Linux Kernel 2.6.28.2Linux Linux Kernel 2.6.28.5Linux Linux Kernel 2.6.31.1Linux Linux Kernel 2.6.30.7Linux Linux Kernel 2.6.29.4Linux Linux Kernel 2.6.30.8Linux Linux Kernel 2.6.30.9Linux Linux Kernel 2.6.28.8Linux Linux Kernel 2.6.29.1Linux Linux Kernel 2.6.30.4Linux Linux Kernel 2.6.28.3Linux Linux Kernel
NA
CVE-2009-1265
Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions prior to 2.6.30-rc1, might allow remote malicious users to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
Linux Linux Kernel 2.6.27.29Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.29.3Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.27.52Linux Linux Kernel 2.6.27.50Linux Linux Kernel 2.6.27.30Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.27.45Linux Linux Kernel 2.6.27.34Linux Linux Kernel 2.6.27.18Linux Linux Kernel 2.6.26.5Linux Linux Kernel 2.6.25.20Linux Linux Kernel 2.6.27.37Linux Linux Kernel 2.6.27.21Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.27.27Linux Linux Kernel 2.6.25.18Linux Linux Kernel 2.6.29Linux Linux Kernel 2.6.27.10Linux Linux Kernel 2.6.26.6
NA
CVE-2010-1088
fs/namei.c in Linux kernel 2.6.18 up to and including 2.6.34 does not always follow NFS automount "symlinks," which allows malicious users to have an unknown impact, related to LOOKUP_FOLLOW.
Linux Linux Kernel 2.6.27.29Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.32.5Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.31Linux Linux Kernel 2.6.29.3Linux Linux Kernel 2.6.21Linux Linux Kernel 2.6.31.9Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.27.30Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.31.3Linux Linux Kernel 2.6.20.13Linux Linux Kernel 2.6.22.4Linux Linux Kernel 2.6.27.45Linux Linux Kernel 2.6.27.34Linux Linux Kernel 2.6.27.18
NA
CVE-2010-1084
Linux kernel 2.6.18 up to and including 2.6.33, and possibly other versions, allows remote malicious users to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/...
Linux Linux Kernel 2.6.27.29Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.32.5Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.31Linux Linux Kernel 2.6.29.3Linux Linux Kernel 2.6.21Linux Linux Kernel 2.6.31.9Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.27.30Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.31.3Linux Linux Kernel 2.6.20.13Linux Linux Kernel 2.6.22.4Linux Linux Kernel 2.6.27.45Linux Linux Kernel 2.6.27.34Linux Linux Kernel 2.6.27.18
NA
CVE-2009-1337
The exit_notify function in kernel/exit.c in the Linux kernel prior to 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and th...
Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.28Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.26Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.16.16Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.17.12Linux Linux Kernel 2.6.16.39Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.21Linux Linux Kernel 2.6.16.9Linux Linux Kernel 2.6.17.9Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.27.1
NA
CVE-2009-1914
The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel prior to 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_r...
Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.16.16Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.17.12Linux Linux Kernel 2.6.16.39Linux Linux Kernel 2.6.27.3Linux Linux KernelLinux Linux Kernel 2.6.21Linux Linux Kernel 2.6.16.9Linux Linux Kernel 2.6.17.9Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.15.3Linux Linux Kernel 2.6.11.10Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.1
NA
CVE-2009-1439
Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and previous versions allows remote malicious users to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.28Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.26Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.29Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.16.16Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.17.12Linux Linux Kernel 2.6.16.39Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.21Linux Linux Kernel 2.6.16.9Linux Linux Kernel 2.6.17.9Linux Linux Kernel 2.6.11.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook