Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux linux kernel 3.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-0311
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel prior to 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2012-5375
The CRC32C feature in the Btrfs implementation in the Linux kernel prior to 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name tha...
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2012-5374
The CRC32C feature in the Btrfs implementation in the Linux kernel prior to 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2013-0290
The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel prior to 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2013-0160
The Linux kernel up to and including 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device.
Linux Linux Kernel 3.0Linux Linux Kernel 3.0.38Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.23Linux Linux Kernel 3.0.20Linux Linux Kernel 3.0.15Linux Linux Kernel 3.0.12Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.3Linux Linux Kernel 3.0.7Linux Linux Kernel 3.0.31Linux Linux Kernel 3.1Linux Linux Kernel 3.1.6Linux Linux Kernel 3.1.5Linux Linux Kernel 3.2.11Linux Linux Kernel 3.0.44Linux Linux Kernel 3.0.37Linux Linux Kernel 3.0.24Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.17Linux Linux Kernel 3.0.14Linux Linux Kernel 3.0.26
NA
CVE-2013-0216
The Xen netback functionality in the Linux kernel prior to 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2013-0217
Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel prior to 3.7.8 allows guest OS users to cause a denial of service (memory consumption) by triggering certain error conditions.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2013-0228
The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel prior to 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36
NA
CVE-2013-1772
The log_prefix function in kernel/printk.c in the Linux kernel 3.x prior to 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and trig...
Linux Linux Kernel 3.0Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.41Linux Linux Kernel 3.0.20Linux Linux Kernel 3.0.21Linux Linux Kernel 3.0.12Linux Linux Kernel 3.0.13Linux Linux Kernel 3.0.2Linux Linux Kernel 3.0.1Linux Linux Kernel 3.0.31Linux Linux Kernel 3.0.6Linux Linux Kernel 3.1Linux Linux Kernel 3.1.4Linux Linux Kernel 3.1.3Linux Linux Kernel 3.0.42Linux Linux Kernel 3.0.39Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.19Linux Linux Kernel 3.0.10Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34
NA
CVE-2012-4530
The load_script function in fs/binfmt_script.c in the Linux kernel prior to 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
Linux Linux Kernel 3.2.21Linux Linux Kernel 3.4.4Linux Linux Kernel 3.0.25Linux Linux Kernel 3.1.2Linux Linux Kernel 3.4.11Linux Linux Kernel 3.0Linux Linux Kernel 3.2.19Linux Linux Kernel 3.0.22Linux Linux Kernel 3.2.23Linux Linux Kernel 3.4.13Linux Linux Kernel 3.6.7Linux Linux Kernel 3.0.5Linux Linux Kernel 3.5.2Linux Linux Kernel 3.2.18Linux Linux Kernel 3.3Linux Linux Kernel 3.0.38Linux Linux Kernel 3.1Linux Linux Kernel 3.2.5Linux Linux Kernel 3.2.26Linux Linux Kernel 3.4Linux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook