Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse linux enterprise real time 10 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-4083
The copy_semid_to_user function in ipc/sem.c in the Linux kernel prior to 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT ...
Linux Linux KernelSuse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
NA
CVE-2010-4073
The ipc subsystem in the Linux kernel prior to 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_...
Linux Linux KernelSuse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
NA
CVE-2010-4162
Multiple integer overflows in fs/bio.c in the Linux kernel prior to 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4078
The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel prior to 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call...
Linux Linux Kernel 2.6.36Linux Linux KernelSuse Linux Enterprise Server 10Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
NA
CVE-2010-4080
The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel prior to 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioc...
Linux Linux Kernel 2.6.36Linux Linux KernelSuse Linux Enterprise Server 10Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
NA
CVE-2010-4157
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel prior to 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4158
The sk_run_filter function in net/core/filter.c in the Linux kernel prior to 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensiti...
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4258
The do_exit function in kernel/exit.c in the Linux kernel prior to 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) ...
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-4081
The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel prior to 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ...
Linux Linux Kernel 2.6.36Linux Linux KernelSuse Linux Enterprise Server 10Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
NA
CVE-2010-3876
net/packet/af_packet.c in the Linux kernel prior to 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the appl...
Linux Linux Kernel 2.6.37Linux Linux KernelSuse Linux Enterprise Server 10Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook