linux

CVEs (3,007)

• CVE-2009-4537Jan 12, 2010
  Linux

  Kernel
  risk 0.00cvss —epss 0.06

  drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted…

• CVE-2009-4536Jan 12, 2010
  Linux

  Kernel
  risk 0.00cvss —epss 0.05

  drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large…

• CVE-2009-3080Nov 20, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.

• CVE-2009-2625Aug 6, 2009
  Apache

  Xerces2 Java
  risk 0.00cvss —epss 0.30

  XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via…

• CVE-2009-2687Aug 5, 2009
  PHP

  PHP
  risk 0.00cvss —epss 0.04

  The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

• CVE-2009-1721Jul 31, 2009
  Openexr

  Openexr
  risk 0.00cvss —epss 0.04

  The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer.

• CVE-2009-1895Jul 16, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory…

• CVE-2009-2287Jul 1, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value,…

• CVE-2009-1888Jun 25, 2009
  Samba (software)

  Samba
  risk 0.00cvss —epss 0.05

  The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to…

• CVE-2009-1962Jun 8, 2009
  Mcj

  Xfig
  risk 0.00cvss —epss 0.00

  Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9)…

• CVE-2009-1633May 28, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.03

  Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment…

• CVE-2009-1630May 14, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files,…

• CVE-2009-1573May 6, 2009
  Branden Robinson

  Xvfb Run
  risk 0.00cvss —epss 0.00

  xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.

• CVE-2009-1186Apr 17, 2009
  Systemd Project

  Udev
  risk 0.00cvss —epss 0.01

  Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments.

• CVE-2009-1270Apr 8, 2009
  ClamAV

  Clamav
  risk 0.00cvss —epss 0.05

  libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

• CVE-2009-1242Apr 6, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended…

• CVE-2009-0590Mar 27, 2009
  OpenSSL Project

  OpenSSL
  risk 0.00cvss —epss 0.06

  The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

• CVE-2009-0784Mar 25, 2009
  Systemtap

  Systemtap
  risk 0.00cvss —epss 0.00

  Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.

• CVE-2009-1072Mar 25, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

• CVE-2009-0834Mar 6, 2009
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit…