Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 3.0.37 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2909
The do_devinfo_ioctl function in drivers/staging/comedi/comedi_fops.c in the Linux kernel prior to 3.1 allows local users to obtain sensitive information from kernel memory via a copy of a short string.
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.0Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.38Linux Linux KernelLinux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32Linux Linux Kernel 3.0.19Linux Linux Kernel 3.0.37Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.27Linux Linux Kernel 3.0.42Linux Linux Kernel 3.0.23Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.40Linux Linux Kernel 3.0.33
NA
CVE-2011-1833
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel prior to 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.0Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.38Linux Linux KernelLinux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32Linux Linux Kernel 3.0.19Linux Linux Kernel 3.0.37Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.27Linux Linux Kernel 3.0.42Linux Linux Kernel 3.0.23Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.40Linux Linux Kernel 3.0.33
NA
CVE-2012-3430
The rds_recvmsg function in net/rds/recv.c in the Linux kernel prior to 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS soc...
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.38Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32Linux Linux Kernel 3.0.19Linux Linux Kernel 3.0.37Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.27Linux Linux Kernel 3.0.42Linux Linux Kernel 3.0.23Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.40Linux Linux Kernel 3.0.33Linux Linux Kernel 3.0.28Linux Linux Kernel 3.0.13
NA
CVE-2014-2889
Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel prior to 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges via a long jump after a conditional jump.
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.0Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.68Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.0.63Linux Linux Kernel 3.0.46Linux Linux Kernel 3.0.47Linux Linux Kernel 3.0.48Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.58Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32Linux Linux Kernel 3.0.52Linux Linux Kernel 3.0.51
NA
CVE-2011-2905
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel prior to 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.38Linux Linux Kernel 3.0.63Linux Linux Kernel 3.0.46Linux Linux Kernel 3.0.47Linux Linux Kernel 3.0.48Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.58Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32Linux Linux Kernel 3.0.52Linux Linux Kernel 3.0.51Linux Linux Kernel 3.0.57Linux Linux Kernel 3.0.19Linux Linux Kernel 3.0.37Linux Linux Kernel 3.0.4
NA
CVE-2013-1773
Buffer overflow in the VFAT filesystem implementation in the Linux kernel prior to 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.0.5Linux Linux KernelLinux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32
NA
CVE-2012-4398
The __request_module function in kernel/kmod.c in the Linux kernel prior to 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.
Linux Linux Kernel 3.4Linux Linux Kernel 3.3.2Linux Linux Kernel 3.3Linux Linux Kernel 3.3.5Linux Linux Kernel 3.3.3Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.4Linux Linux Kernel 3.2.14Linux Linux Kernel 3.2.30Linux Linux Kernel 3.2.18Linux Linux Kernel 3.2Linux Linux Kernel 3.2.6Linux Linux Kernel 3.2.7Linux Linux Kernel 3.1Linux Linux Kernel 3.1.5Linux Linux Kernel 3.1.4Linux Linux Kernel 3.0Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.41Linux Linux Kernel 3.0.20Linux Linux Kernel 3.0.21Linux Linux Kernel 3.0.18
NA
CVE-2012-0957
The override_release function in kernel/sys.c in the Linux kernel prior to 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.4.1Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.4Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2012-4508
Race condition in fs/ext4/extents.c in the Linux kernel prior to 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.4.1Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.4Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2012-5532
The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel prior to 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message. NOTE: this vulnerability exists because of an in...
Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.0.22Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.4.23Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34Linux Linux Kernel 3.5.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook