kernel-source-2.4.27 - several vulnerabilities

Fixed packages 1

Vulnerabilities 16

• Unscored —
  CVE-2006-0038

  Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization soluti…

  Mar 22, 2006
• Unscored —
  CVE-2006-0039

  Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADM…

  May 19, 2006
• Unscored —
  CVE-2006-0741

  Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endle…

  Mar 7, 2006
• Unscored —
  CVE-2006-0742

  The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compile…

  Mar 9, 2006
• Unscored —
  CVE-2006-1056

  The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation Authent…

  Apr 20, 2006
• Unscored —
  CVE-2006-1242

  The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RS…

  Mar 15, 2006
• Unscored —
  CVE-2006-1343

  net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3prot…

  Mar 21, 2006
• Unscored —
  CVE-2006-1368

  Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cau…

  Mar 23, 2006
• Unscored —
  CVE-2006-1524

  madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local use…

  Apr 19, 2006
• Unscored —
  CVE-2006-1525

  ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a reques…

  Apr 19, 2006
• Unscored —
  CVE-2006-1857

  Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) a…

  May 22, 2006
• Unscored —
  CVE-2006-1858

  SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute…

  May 22, 2006
• Unscored —
  CVE-2006-1864 Public exploit

  Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions…

  Apr 26, 2006
• Unscored —
  CVE-2006-2271

  The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kern…

  May 9, 2006
• Unscored —
  CVE-2006-2272

  Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP f…

  May 9, 2006
• Unscored —
  CVE-2006-2274

  Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) v…

  May 9, 2006