Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

andrea bittau vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-3527
arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel prior to 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install...
Linux Linux Kernel 2.6.18Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.20.16Linux Linux Kernel 2.6.19.4Linux Linux Kernel 2.4.36.1Linux Linux Kernel 2.6.20.17Linux Linux Kernel 2.4.36.4Linux Linux Kernel 2.6.20.20Linux Linux Kernel 2.4.36.3Linux Linux Kernel 2.6.20.18Linux Linux Kernel 2.6.19.7Linux Linux Kernel 2.6.20.19Linux Linux KernelLinux Linux Kernel 2.4.36Linux Linux Kernel 2.6.19.6Linux Linux Kernel 2.6.19.5Linux Linux Kernel 2.4.36.5Linux Linux Kernel 2.2.27Linux Linux Kernel 2.6
NA
CVE-2008-4554
The do_splice_from function in fs/splice.c in the Linux kernel prior to 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.26Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.22.1Linux Linux Kernel 2.6.23.16Linux Linux Kernel 2.6.24.1
NA
CVE-2008-4576
sctp in Linux kernel prior to 2.6.25.18 allows remote malicious users to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init t...
Linux Linux Kernel 2.6.23.11Linux Linux Kernel 2.6.23.9Linux Linux Kernel 2.6.20.18Linux Linux Kernel 2.6.20.17Linux Linux Kernel 2.6.20.20Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23 Rc1Linux Linux Kernel 2.4.36Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.21.7Linux Linux Kernel 2.6.23.10Linux Linux Kernel 2.6.24 Rc1Linux Linux Kernel 2.6.24Linux Linux Kernel 2.6.25.10Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.23.12Linux Linux Kernel 2.6.20.19Linux Linux Kernel 2.6.19.7Linux Linux Kernel 2.6.24 Rc4Linux Linux Kernel 2.6.24 Rc5
NA
CVE-2008-4933
Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel prior to 2.6.28-rc1 allows malicious users to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, relat...
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.26.5Linux Linux KernelLinux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.22.1Linux Linux Kernel 2.6.23.16
NA
CVE-2008-4934
The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel prior to 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows malicious users to cause a denial of service (system crash) via a crafted...
Linux Linux KernelDebian Debian Linux 4.0Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10
NA
CVE-2008-5025
Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel prior to 2.6.28-rc1 allows malicious users to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, ...
Linux Linux Kernel 2.6.25.4Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6.25.9Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.13Linux Linux Kernel 2.6.24.2Linux Linux Kernel 2.4.36.6Linux Linux Kernel 2.6.26.5Linux Linux KernelLinux Linux Kernel 2.6.22.21Linux Linux Kernel 2.6.25.12Linux Linux Kernel 2.6.25.5Linux Linux Kernel 2.6.23.8Linux Linux Kernel 2.6.25Linux Linux Kernel 2.6.22.12Linux Linux Kernel 2.6.25.8Linux Linux Kernel 2.6.21.6Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.22.1Linux Linux Kernel 2.6.23.16
NA
CVE-2008-5182
The inotify functionality in Linux kernel 2.6 prior to 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
Linux Linux Kernel 2.6.11.11Linux Linux Kernel 2.6.11.12Linux Linux Kernel 2.6.11.9Linux Linux Kernel 2.6.12Linux Linux Kernel 2.6.13Linux Linux Kernel 2.6.13.1Linux Linux Kernel 2.6.14.2Linux Linux Kernel 2.6.14.3Linux Linux Kernel 2.6.15.3Linux Linux Kernel 2.6.15.4Linux Linux Kernel 2.6.16.11Linux Linux Kernel 2.6.16.12Linux Linux Kernel 2.6.16.19Linux Linux Kernel 2.6.16.2Linux Linux Kernel 2.6.16.27Linux Linux Kernel 2.6.16.28Linux Linux Kernel 2.6Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.11.3Linux Linux Kernel 2.6.12.1Linux Linux Kernel 2.6.12.2
NA
CVE-2008-5029
The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and previous versions makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SC...
Linux Linux Kernel 2.6.24.7Linux Linux Kernel 2.6.23.12Linux Linux Kernel 2.6.25.2Linux Linux Kernel 2.6.20.19Linux Linux Kernel 2.6.19.7Linux Linux Kernel 2.6.24 Rc4Linux Linux Kernel 2.6.24 Rc5Linux Linux Kernel 2.4.36.2Linux Linux Kernel 2.6.23Linux Linux Kernel 2.6.23.10Linux Linux Kernel 2.6.24 Rc1Linux Linux Kernel 2.6.24Linux Linux Kernel 2.6.25.10Linux Linux Kernel 2.6.25.11Linux Linux Kernel 2.6.25.6Linux Linux Kernel 2.6.25.7Linux Linux Kernel 2.6.25.1Linux Linux Kernel 2.6.18Linux Linux Kernel 2.6Linux Linux Kernel 2.6.24.3Linux Linux Kernel 2.6.22.14Linux Linux Kernel 2.6.25.15
NA
CVE-2008-5300
Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-20...
Linux Linux Kernel 2.6.28
NA
CVE-2008-3528
The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate malicious users to cause...
Linux Linux Kernel 2.6.26.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook