linux linux kernel 2.6.20.1 vulnerabilities and exploits

(subscribe to this query)

The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 prior to 2.6.20.13, and 2.6.21.x prior to 2.6.21.4, allows remote malicious users to cause a denial of service by causing certain invalid states that trigger ...

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow labe...

The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel prior to 2.6.20.15, 2.6.21.x prior to 2.6.21.6, and prior to 2.6.22 allows remote malicious users to cause a denial of service (crash) via an encoded, out-of-range index value for a choice fi...

Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 up to and including 2.6.26.2 allows remote malicious users to cause a denial of service (panic) via a crafted in...

The minix filesystem code in Linux kernel 2.6.x prior to 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overf...

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel prior to 2.6.20.8 allows malicious users to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.

1 EDB exploit

Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel prior to 2.6.22, when the xfrm6_tunnel module is enabled, allows remote malicious users to cause a denial of service (panic) via crafted IPv6 packets.

The asn1 implementation in (a) the Linux kernel 2.4 prior to 2.4.36.6 and 2.6 prior to 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote maliciou...

The signal handling in the Linux kernel prior to 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook