linux linux kernel 2.6.16.37 vulnerabilities and exploits

(subscribe to this query)

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel prior to 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid opti...

1 EDB exploit

Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 prior to 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote malicious users to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LIS...

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 prior to 2.6.18.6, and 2.6.19.x, allow remote malicious users to cause a denial of service (crash) and possibly e...

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel prior to 2.6.20.8 allows malicious users to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.

1 EDB exploit

Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel prior to 2.6.22, when the xfrm6_tunnel module is enabled, allows remote malicious users to cause a denial of service (panic) via crafted IPv6 packets.

The signal handling in the Linux kernel prior to 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.

fs/nfs/client.c in the Linux kernel prior to 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.

The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel prior to 2.6.23 allows remote malicious users to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.

Linux kernel prior to 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook