Page 988 of 5206 results (0.014 seconds)

CVSS: 4.9EPSS: 0%CPEs: 46EXPL: 1

Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function. • https://www.exploit-db.com/exploits/26749 http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e http://marc.info/?l=linux-kernel&m=113190437101622&w=2 http://secunia.com/advisories/17917 http://secunia.com/advisories/17918 http://secunia.com/advisories/18203 http://www.securityfocus.com/advisories/9806 http://www.securityfocus.com/archive/1/419522/100/0/threaded http://www.securityfocus.com/archive/1/427981/100/ •

CVSS: 4.9EPSS: 0%CPEs: 37EXPL: 0

The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges. • http://secunia.com/advisories/17786 http://secunia.com/advisories/17787 http://secunia.com/advisories/17917 http://secunia.com/advisories/17918 http://secunia.com/advisories/18203 http://secunia.com/advisories/18510 http://secunia.com/advisories/19374 http://www.debian.org/security/2006/dsa-1017 http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739 http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 h • CWE-399: Resource Management Errors •

CVSS: 4.9EPSS: 2%CPEs: 37EXPL: 0

The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash). • ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U http://secunia.com/advisories/17761 http://secunia.com/advisories/17787 http://secunia.com/advisories/17917 http://secunia.com/advisories/17918 http://secunia.com/advisories/18203 http://secunia.com/advisories/19369 http://secunia.com/advisories/19374 http://secunia.com/advisories/19607 http://www.debian.org/security/2006/dsa-1017 http://www.debian.org/security/2006/dsa-1018 http://www.kernel.org/ •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors. NOTE: it is not clear whether this issue can be triggered by an attacker. • http://bugzilla.kernel.org/show_bug.cgi?id=5194 •

CVSS: 4.6EPSS: 0%CPEs: 134EXPL: 1

The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table. • https://www.exploit-db.com/exploits/26489 http://secunia.com/advisories/17504 http://secunia.com/advisories/17541 http://secunia.com/advisories/17648 http://secunia.com/advisories/18510 http://secunia.com/advisories/18562 http://secunia.com/advisories/18684 http://secunia.com/advisories/19369 http://secunia.com/advisories/19374 http://securitytracker.com/id?1015434 http://www.debian.org/security/2006/dsa-1017 http://www.debian.org/security/2006/dsa-1018 http://www& • CWE-399: Resource Management Errors •