Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sendfile sendfile vulnerabilities and exploits

(subscribe to this query)
470
VMScore
CVE-2001-0623
sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local malicious users to gain privileges.
Sendfile Sendfile
725
VMScore
CVE-2010-2693
FreeBSD 7.1 up to and including 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system file corruption) and gain privileges via the sendfile system call.
Freebsd Freebsd 7.1Freebsd Freebsd 7.2Freebsd Freebsd 7.3Freebsd Freebsd 8.0Freebsd Freebsd 8.1
890
VMScore
CVE-2005-0708
The sendfile system call in FreeBSD 4.8 up to and including 4.11 and 5 up to and including 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote malicious users to obtain sensitive information.
Dragonflybsd Dragonflybsd 1.1Freebsd Freebsd 4.0Freebsd Freebsd 4.10Freebsd Freebsd 4.3Freebsd Freebsd 4.5Freebsd Freebsd 4.6Freebsd Freebsd 4.7Freebsd Freebsd 4.8Freebsd Freebsd 4.9Freebsd Freebsd 5.1Freebsd Freebsd 5.3Dragonflybsd Dragonflybsd 1.0Freebsd Freebsd 4.1.1Freebsd Freebsd 5.0Freebsd Freebsd 5.2.1Freebsd Freebsd 4.11Freebsd Freebsd 4.2Freebsd Freebsd 4.4Freebsd Freebsd 5.4Freebsd Freebsd 4.1Freebsd Freebsd 4.6.2Freebsd Freebsd 5.2
265
VMScore
CVE-2003-1135
Buffer overflow in Yahoo! Messenger 5.6 allows remote malicious users to cause a denial of service (crash) via a file send request (sendfile) with a large number of "%" (percent) characters after the Yahoo ID.
Yahoo Messenger 5.6
436
VMScore
CVE-2009-2912
The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors related to vnode function calls.
Sun Opensolaris Snv 05Sun Opensolaris Snv 06Sun Opensolaris Snv 25Sun Opensolaris Snv 30Sun Opensolaris Snv 31Sun Opensolaris Snv 40Sun Opensolaris Snv 39Sun Opensolaris Snv 48Sun Opensolaris Snv 45Sun Opensolaris Snv 46Sun Opensolaris Snv 52Sun Opensolaris Snv 51Sun Opensolaris Snv 66Sun Opensolaris Snv 65Sun Opensolaris Snv 77Sun Opensolaris Snv 79Sun Opensolaris Snv 90Sun Opensolaris Snv 89Sun Opensolaris Snv 82Sun Opensolaris Snv 91Sun Opensolaris Snv 92Sun Opensolaris Snv 21
436
VMScore
CVE-2008-0777
The sendfile system call in FreeBSD 5.5 up to and including 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.
Freebsd Freebsd 7.0Freebsd Freebsd 6.2Freebsd Freebsd 5.5Freebsd Freebsd 6.3
418
VMScore
CVE-2013-5666
The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transmissions, which allows local users to obtain sensitive information (kernel memory) via a length greater than the length of the file.
Freebsd Freebsd 9.2
NA
CVE-2024-26640
In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs. This patch adds to can_map_frag() these additional checks: - Page must n...
632
VMScore
CVE-2008-3666
Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent malicious users to cause a denial of service (panic) via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by a...
Sun Opensolaris Snv 01Sun Opensolaris Snv 04Sun Opensolaris Snv 06Sun Opensolaris Snv 07Sun Opensolaris Snv 09Sun Opensolaris Snv 10Sun Opensolaris Snv 12Sun Opensolaris Snv 15Sun Opensolaris Snv 18Sun Opensolaris Snv 20Sun Opensolaris Snv 21Sun Opensolaris Snv 23Sun Opensolaris Snv 24Sun Opensolaris Snv 26Sun Opensolaris Snv 29Sun Opensolaris Snv 32Sun Opensolaris Snv 34Sun Opensolaris Snv 35Sun Opensolaris Snv 37Sun Opensolaris Snv 40Sun Opensolaris Snv 43Sun Opensolaris Snv 45
392
VMScore
CVE-2011-2526
Apache Tomcat 5.5.x prior to 5.5.34, 6.x prior to 6.0.33, and 7.x prior to 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial...
Apache Tomcat 5.5.27Apache Tomcat 5.5.18Apache Tomcat 5.5.12Apache Tomcat 5.5.14Apache Tomcat 5.5.10Apache Tomcat 5.5.4Apache Tomcat 5.5.7Apache Tomcat 5.5.1Apache Tomcat 5.5.11Apache Tomcat 5.5.28Apache Tomcat 5.5.6Apache Tomcat 5.5.26Apache Tomcat 5.5.20Apache Tomcat 5.5.15Apache Tomcat 5.5.5Apache Tomcat 5.5.30Apache Tomcat 5.5.21Apache Tomcat 5.5.22Apache Tomcat 5.5.3Apache Tomcat 5.5.32Apache Tomcat 5.5.31Apache Tomcat 5.5.9
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2012-1823malicious code‎CVE-2024-5770CVE-2023-45866CVE-2024-35687local usersCVE-2024-31246CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook