CVSS: 7.1EPSS: 57%CPEs: 405EXPL: 5CVE-2010-1173 – Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service
https://notcve.org/view.php?id=CVE-2010-1173
The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data. La función sctp_process_unk_param en net/sctp/sm_make_chunk.c en el kernel de Linux v2.6.33.3 y anteriores, cuando está activado SCTP, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de un paquete SCTPChunkInit que contiene múltiples parámetros inválidos que requieren una cantidad grande de datos de error. • https://www.exploit-db.com/exploits/14594 http://article.gmane.org/gmane.linux.network/159531 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=5fa782c2f5ef6c2e4f04d3e228412c9b4a4c8809 http://kbase.redhat.com/faq/docs/DOC-31052 http://marc.info/?l=oss-security&m=127251068407878&w=2 http://secunia.com/advisories/39830 http://secunia.com/advisories/40218 http://secunia.com/advisories/43315 http://www.debian.org/security/2010/dsa-2053 http://www • CWE-20: Improper Input Validation CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 2.1EPSS: 0%CPEs: 147EXPL: 0CVE-2010-1488
https://notcve.org/view.php?id=CVE-2010-1488
The proc_oom_score function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation. La función proc_oom_score de fs/proc/base.c en el kernel de Linux en versiones anteriores a la 2.6.34-rc4 utiliza de forma inapropiada estructuras de datos durante la selección de un candidato para ser tratado por el procesdo OOM killer, lo que puede permitir a usuarios locales provocar una denegación de servicio a través de patrones sin especificar de creación de tareas. • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b95c35e76b29ba812e5dabdd91592e25ec640e93 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4 http://www.openwall.com/lists/oss-security/2010/04/14/1 https://bugzilla.redhat.com/show_bug.cgi?id=582068 • CWE-399: Resource Management Errors •
CVSS: 7.2EPSS: 0%CPEs: 147EXPL: 0CVE-2010-1162 – kernel: tty: release_one_tty() forgets to put pids
https://notcve.org/view.php?id=CVE-2010-1162
The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors. La función release_one_tty de drivers/char/tty_io.c del kernel de Linux en versiones anteriores a la 2.6.34-rc4 omite determinadas llamadas que se requieren a la función put_pid, lo que tiene un impacto sin especificar y vectores de ataque locales. • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6da8d866d0d39e9509ff826660f6a86a6757c966 http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html http://secunia.com/advisories/39830 http://secunia.com/advisories/40645 http://www.debian.org/security/2010/dsa-2053 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4 http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 http://www.openwall.com/lists/oss- •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 1CVE-2010-1148
https://notcve.org/view.php?id=CVE-2010-1148
The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions. La función cifs_create en fs/cifs/dir.c en el kernel de Linux v2.6.33.2 y anteriores permite a usuarios locales causar una denegación de servicio (referencias de puntero nulo y OOPS) o posiblemente tener un impacto no especificado a través de un campo nameidata NULL (tambien llamado nd) en una solicitud de creación de archivos POSIX a un servidor que soporta extensiones UNIX. • http://lists.samba.org/archive/linux-cifs-client/2010-April/005741.html http://lists.samba.org/archive/linux-cifs-client/2010-April/005742.html http://lists.samba.org/archive/linux-cifs-client/2010-April/005746.html http://lists.samba.org/archive/linux-cifs-client/2010-April/005757.html http://marc.info/?l=oss-security&m=127045754521927&w=2 http://marc.info/?l=oss-security&m=127045779122119&w=2 http://openwall.com/lists/oss-security/2010/04/06/2 http://secunia.com • CWE-476: NULL Pointer Dereference •
CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 4CVE-2010-1146 – ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2010-1146
The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/. El kernel de Linux v2.6.33.2 y anteriores, cuando esta sobre un sistema de fichero ReiserFS, no restringe adecuadamente la lectura o escritura al directorio .reiserfs_priv, lo que permite a usuarios locales conseguir privilegios mediante la modificación de (1) atributos extendidos o (2) ACLs, como se demuestra mediante el borrado de un fichero bajo .reiserfs_priv/xattrs/. • https://www.exploit-db.com/exploits/12130 http://marc.info/?l=linux-kernel&m=127076012022155&w=2 http://osvdb.org/63601 http://secunia.com/advisories/39316 http://www.exploit-db.com/exploits/12130 http://www.securityfocus.com/bid/39344 https://bugzilla.redhat.com/show_bug.cgi?id=568041 https://exchange.xforce.ibmcloud.com/vulnerabilities/57782 • CWE-264: Permissions, Privileges, and Access Controls •