Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 3.7.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-4542
block/scsi_ioctl.c in the Linux kernel up to and including 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6
NA
CVE-2013-2237
The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel prior to 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interfa...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.8.10Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.4.1Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.8.2
NA
CVE-2013-1959
kernel/user_namespace.c in the Linux kernel prior to 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privil...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.8.2Linux Linux Kernel 3.1Linux Linux Kernel 3.0.63
NA
CVE-2013-4129
The bridge multicast implementation in the Linux kernel up to and including 3.10.3 does not check whether a certain timer is armed before modifying the timeout value of that timer, which allows local users to cause a denial of service (BUG and system crash) via vectors involving ...
Linux Linux Kernel 3.9.0Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.8.10Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.8.2
NA
CVE-2013-4127
Use-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the Linux kernel up to and including 3.10.3 allows local users to cause a denial of service (OOPS and system crash) via vectors involving powering on a virtual machine.
Linux Linux Kernel 3.9.0Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.8.10Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.8.2
NA
CVE-2013-2206
The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel prior to 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, which allows remote malicious users to cause a denial of se...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.4.1Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.8.2Linux Linux Kernel 3.1
NA
CVE-2013-4125
The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel up to and including 3.10.1 does not properly handle Router Advertisement (RA) messages in certain circumstances involving three routes that initially qualified for membership in an ECMP rout...
Linux Linux Kernel 3.9.0Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.8.10Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.8.2
NA
CVE-2013-2547
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel up to and including 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap mem...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.0.63Linux Linux Kernel 3.0.46
NA
CVE-2013-2548
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel up to and including 3.8.2 uses an incorrect length value during a copy operation, which allows local users to obtain sensitive information from kernel...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.0.63Linux Linux Kernel 3.0.46
NA
CVE-2013-1858
The clone system-call implementation in the Linux kernel prior to 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which allows local users to gain privileges by calling chroot and leveraging the sharing of the / directory between a parent pro...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.30Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.26Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.0.68Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.0.63Linux Linux Kernel 3.0.46
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook