CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2011-3359 – kernel: b43: allocate receive buffers big enough for max frame len + offset
https://notcve.org/view.php?id=CVE-2011-3359
The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame. La función de dma_rx drivers/net/wireless/b43/dma.c en el kernel de Linux antes de 2.6.39 no asigna correctamente los búferes de recepción, lo que permite a atacantes remotos provocar una denegación de servicio (caída del sistema) a través de un marco diseñado. • http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c85ce65ecac078ab1a1835c87c4a6319cf74660a http://www.openwall.com/lists/oss-security/2011/09/14/2 https://bugzilla.redhat.com/show_bug.cgi?id=738202 https://github.com/torvalds/linux/commit/c85ce65ecac078ab1a1835c87c4a6319cf74660a https://access.redhat.com/security/cve/CVE-2011-3359 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2011-1162 – kernel: tpm: infoleak
https://notcve.org/view.php?id=CVE-2011-1162
The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command. La función tpm_read en el kernel de Linux v2.6 no limpia adecuadamante la memoria, lo que podría permitir leer los resultados de los comandos TPM anteriores a usuarios locales. • http://www.securityfocus.com/bid/50764 https://bugzilla.redhat.com/show_bug.cgi?id=732629 https://access.redhat.com/security/cve/CVE-2011-1162 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.7EPSS: 0%CPEs: 2EXPL: 0CVE-2011-3593 – kernel: vlan: fix panic when handling priority tagged frames
https://notcve.org/view.php?id=CVE-2011-3593
A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames. Cierta actualización de Red Hat para la función vlan_hwaccel_do_receive en net/8021q/vlan_core.c del kernel Linux v2.6.32 en Red Hat Enterprise Linux (RHEL) 6 permite que atacantes remotos provoquen una denegación de servicio (parada del sistema) mediante una trama VLAN con etiqueta de prioridad. • http://www.openwall.com/lists/oss-security/2012/03/05/3 https://bugzilla.redhat.com/show_bug.cgi?id=742846 https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=0e48f8daac293335e16e007663b9f4d248f89f0c https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd https://access.redhat.com/security/cve/CVE-2011-3593 • CWE-399: Resource Management Errors •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 1CVE-2011-4326 – kernel: wrong headroom check in udp6_ufo_fragment()
https://notcve.org/view.php?id=CVE-2011-4326
The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device. La función udp6_ufo_fragment en net/ipv6/udp.c en el kernel de Linux antes de v2.6.39, cuando la opción de "UDP Fragmentation Offload" (UFO) está activada, permite a atacantes remotos causar una denegación de servicio (caída del sistema) mediante el envío de paquetes IPv6 UDP a un dispositivo de puente. • http://downloads.avaya.com/css/P8/documents/100156038 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9cf73ea7ff78f52662c8658d93c226effbbedde http://www.openwall.com/lists/oss-security/2011/11/21/10 http://www.securityfocus.com/bid/50751 https://bugzilla.redhat.com/show_bug.cgi?id=682066 https://bugzilla.redhat.com/show_bug.cgi?id=755584 https://github.com/torvalds/linux/commit&#x • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-399: Resource Management Errors •
CVSS: 4.9EPSS: 0%CPEs: 4EXPL: 1CVE-2010-4250 – Linux Kernel 2.6.x - 'inotify_init()' Memory Leak Local Denial of Service
https://notcve.org/view.php?id=CVE-2010-4250
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files. Una vulnerabilidad de pérdida de memoria en la función inotify_init1 en fs/notify/inotify/inotify_user.c en versiones del kernel de Linux anteriores a v2.6.37 permite a usuarios locales provocar una denegación de servicio (por excesivo consumo de memoria) a través de vectores relacionados con intentos fallidos de creación de archivos. • https://www.exploit-db.com/exploits/35013 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2ae4cc9a16e211c8a128ba10d22a85431f093ab http://www.openwall.com/lists/oss-security/2010/11/24/11 https://bugzilla.redhat.com/show_bug.cgi?id=656830 https://github.com/torvalds/linux/commit/a2ae4cc9a16e211c8a128ba10d22a85431f093ab https://access.redhat.com/security/cve/CVE-2010-4250 • CWE-399: Resource Management Errors CWE-401: Missing Release of Memory after Effective Lifetime •