Linux Archives - CVE Vulnerability

CVE-2008-7256

Sun, 26 Feb 2023 09:11:56 +0000

mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.

The post CVE-2008-7256 appeared first on CVE Vulnerability.

CVE-2008-6661

Sun, 26 Feb 2023 09:11:38 +0000

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file.

The post CVE-2008-6661 appeared first on CVE Vulnerability.

CVE-2008-6662

Sun, 26 Feb 2023 09:11:38 +0000

AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption.

The post CVE-2008-6662 appeared first on CVE Vulnerability.

CVE-2008-3651

Sun, 26 Feb 2023 09:10:07 +0000

Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.

The post CVE-2008-3651 appeared first on CVE Vulnerability.

CVE-2008-3546

Sun, 26 Feb 2023 09:10:03 +0000

Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system’s PATH_MAX when running GIT utilities such as git-diff or git-grep.

The post CVE-2008-3546 appeared first on CVE Vulnerability.

CVE-2008-2953

Sun, 26 Feb 2023 09:09:46 +0000

Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via “partial file list requests” that trigger a NULL pointer dereference.

The post CVE-2008-2953 appeared first on CVE Vulnerability.

CVE-2008-2954

Sun, 26 Feb 2023 09:09:46 +0000

client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.

The post CVE-2008-2954 appeared first on CVE Vulnerability.

CVE-2008-1926

Sun, 26 Feb 2023 09:09:16 +0000

Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an “addr=” statement to the login name, aka “audit log injection.”

The post CVE-2008-1926 appeared first on CVE Vulnerability.

CVE-2008-1628

Sun, 26 Feb 2023 09:09:07 +0000

Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information.

The post CVE-2008-1628 appeared first on CVE Vulnerability.

CVE-2018-5873

Sun, 26 Feb 2023 06:50:29 +0000

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.

The post CVE-2018-5873 appeared first on CVE Vulnerability.