linux linux kernel 2.6.20.7 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and previous versions allows remote malicious users to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel prior to 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensit...

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel prior to 2.6.27.22 allows remote malicious users to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonst...

1 EDB exploit

The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel prior to 2.6.29, when Network Namespace Support (aka NET_NS) is enabled, allows remote malicious users to cause a denial of service (NULL pointer dereference and system crash) via vectors in...

Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel prior to 2.6.27.5 allows remote malicious users to have an unknown impact via an "invalid beacon/probe response."

The sock_getsockopt function in net/core/sock.c in the Linux kernel prior to 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

1 EDB exploit

The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel prior to 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows malicious users to cause a denial of service (NULL po...

1 EDB exploit

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel prior to 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCr...

The clone system call in the Linux kernel 2.6.28 and previous versions allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.

1 EDB exploit

Stack consumption vulnerability in the do_page_fault function in arch/x86/mm/fault.c in the Linux kernel prior to 2.6.28.5 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via unspecified vectors that trigger page faults on a machine...

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook