linux linux kernel 2.6.18.4 vulnerabilities and exploits

(subscribe to this query)

The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 prior to 2.6.20.13, and 2.6.21.x prior to 2.6.21.4, allows remote malicious users to cause a denial of service by causing certain invalid states that trigger ...

The random number feature in Linux kernel 2.6 prior to 2.6.20.13, and 2.6.21.x prior to 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same va...

Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel prior to 2.6.34-rc6 allow remote malicious users to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, rela...

The proc_oom_score function in fs/proc/base.c in the Linux kernel prior to 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation.

fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel prior to 2.6.34-rc4 allows remote malicious users to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CI...

Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel prior to 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID c...

The do_pages_move function in mm/migrate.c in the Linux kernel prior to 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node ...

1 EDB exploit

net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel prior to 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure ar...

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook