CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 1CVE-2011-1023 – kernel: BUG_ON() in rds_send_xmit()
https://notcve.org/view.php?id=CVE-2011-1023
21 Jun 2012 — The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation. El subsistema 'Reliable Datagram Sockets' (SDR) del kernel de Linux en versiones anteriores a v2.6.38 no gestiona correctamente las actualizaciones del mapa de congestiones, lo que permi... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 1CVE-2011-4324 – kernel: nfsv4: mknod(2) DoS
https://notcve.org/view.php?id=CVE-2011-4324
21 Jun 2012 — The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem. La función de encode_share_access fs/nfs/nfs4xdr.c en versiones del kernel de Linux anteriores a v2.6.29 permite a usuarios locales provocar una denegación de servicio (caída del sistema) mediante el uso de la llamada al sistema 'mknod' con una ruta de acceso en un sistema de archiv... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29 •
CVSS: 7.5EPSS: 4%CPEs: 10EXPL: 4CVE-2012-2127
https://notcve.org/view.php?id=CVE-2012-2127
21 Jun 2012 — fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd. fs/proc/root.c en las implementaciones de procfs del kernel de Linux anteriores a v3.2 no interactua adecuadamente con las llamadas al sistema de CLONE_NEWPID, lo... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1CVE-2010-4250 – Linux Kernel 2.6.x - 'inotify_init()' Memory Leak Local Denial of Service
https://notcve.org/view.php?id=CVE-2010-4250
21 Jun 2012 — Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files. Una vulnerabilidad de pérdida de memoria en la función inotify_init1 en fs/notify/inotify/inotify_user.c en versiones del kernel de Linux anteriores a v2.6.37 permite a usuarios locales provocar una denegación de servicio (por excesivo consumo de memoria) a través de vectores... • https://www.exploit-db.com/exploits/35013 • CWE-399: Resource Management Errors CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2010-4650
https://notcve.org/view.php?id=CVE-2010-4650
21 Jun 2012 — Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server. Un desbordamiento de búfer en la función fuse_do_ioctl en fs/fusible/file.c en versiones del kernel de Linux anteriores a v2.6.37 permite a usuarios locales provocar una denegación de servicio o posiblemente tener un impacto no especificado mediante el aprovechamiento de ... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2011-0006 – kernel: ima: fix add LSM rule bug
https://notcve.org/view.php?id=CVE-2011-0006
21 Jun 2012 — The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, when the Linux Security Modules (LSM) framework is disabled, allows local users to bypass Integrity Measurement Architecture (IMA) rules in opportunistic circumstances by leveraging an administrator's addition of an IMA rule for LSM. La función ima_lsm_rule_init en security/integrity/ima/ima_policy.c en versiones del kernel de Linux anteriores a v2.6.37, cuando 'Linux Security Modules' (LSM) está desacti... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 0CVE-2011-0716 – kernel: deficiency in processing igmp host membership reports in br_multicast
https://notcve.org/view.php?id=CVE-2011-0716
21 Jun 2012 — The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface. La función de br_multicast_add_group en net/bridge/br_multicast.c en versiones del kernel de Linux anteriores a v2.6.38, cuando se usa una determinada configuración de bridge Ethernet, permite a usuarios locales provocar una de... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1CVE-2010-4648 – kernel: orinoco: fix TKIP countermeasure behaviour
https://notcve.org/view.php?id=CVE-2010-4648
21 Jun 2012 — The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames. La función de orinoco_ioctl_set_auth en drivers/net/wireless/orinoco/wext.c en el kernel de Linux en vesiones anteriores a la v2.6.37 no implementa un mecanismo de protección TKIP, lo que facilita a los atacantes remotos a la hora de obtener ... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 •
CVSS: 5.5EPSS: 0%CPEs: 17EXPL: 2CVE-2011-1479 – Linux Kernel 2.6.x - 'inotify_init1()' Double-Free Local Denial of Service
https://notcve.org/view.php?id=CVE-2011-1479
21 Jun 2012 — Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250. Una vulnerabilidad de doble liberación en el subsistema inotify en versiones del kernel de Linux anteriores a v2.6.39 permite a usuarios locales provocar una denegación de servicio (caída del sistema) a través de vectores relacion... • https://www.exploit-db.com/exploits/35600 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 6%CPEs: 262EXPL: 1CVE-2012-1583 – kernel: ipv6: panic using raw sockets
https://notcve.org/view.php?id=CVE-2012-1583
16 Jun 2012 — Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets. Vulnerabilidad de liberación doble en la función xfrm6_tunnel_rcv en net/ipv6/xfrm6_tunnel.c en el kernel de Linux anterior a v2.6.22, cuando el módulo xfrm6_tunnel está activada, permite a atacantes remotos causar una denegación de servicio (pánico) a través de ... • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-399: Resource Management Errors •