linux linux kernel 2.6.23.14 vulnerabilities and exploits

(subscribe to this query)

The vmsplice_to_pipe function in Linux kernel 2.6.17 up to and including 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE...

2 EDB exploits

VFS in the Linux kernel prior to 2.6.22.16, and 2.6.23.x prior to 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.

1 Github repository

The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 prior to 2.4.36.5 and 2.6 prior to 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_...

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 up to and including 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's proces...

2 EDB exploits

Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 up to and including 2.6.26.2 allows remote malicious users to cause a denial of service (panic) via a crafted in...

The minix filesystem code in Linux kernel 2.6.x prior to 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overf...

The asn1 implementation in (a) the Linux kernel 2.4 prior to 2.4.36.6 and 2.6 prior to 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote maliciou...

Linux kernel prior to 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook