linux linux kernel 2.6.16.23 vulnerabilities and exploits

(subscribe to this query)

net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel prior to 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure ar...

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel prior to 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid opti...

1 EDB exploit

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow labe...

Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 prior to 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote malicious users to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LIS...

The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel prior to 2.6.20.15, 2.6.21.x prior to 2.6.21.6, and prior to 2.6.22 allows remote malicious users to cause a denial of service (crash) via an encoded, out-of-range index value for a choice fi...

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 prior to 2.6.18.6, and 2.6.19.x, allow remote malicious users to cause a denial of service (crash) and possibly e...

The minix filesystem code in Linux kernel 2.6.x prior to 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overf...

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel prior to 2.6.20.8 allows malicious users to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.

1 EDB exploit

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook