kernel-source-2.6.8 - several vulnerabilities

Fixed packages 1

Vulnerabilities 24

• Unscored —
  CVE-2005-3359

  The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain so…

  Mar 2, 2006
• Unscored —
  CVE-2006-0038

  Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization soluti…

  Mar 22, 2006
• Unscored —
  CVE-2006-0039

  Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADM…

  May 19, 2006
• Unscored —
  CVE-2006-0456

  The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local …

  Jun 27, 2006
• Unscored —
  CVE-2006-0554

  Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, w…

  Mar 7, 2006
• Unscored —
  CVE-2006-0555

  The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack …

  Mar 7, 2006
• Unscored —
  CVE-2006-0557

  sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making cer…

  Mar 12, 2006
• Unscored —
  CVE-2006-0558

  perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by in…

  Apr 14, 2006
• Unscored —
  CVE-2006-0741

  Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endle…

  Mar 7, 2006
• Unscored —
  CVE-2006-0742

  The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compile…

  Mar 9, 2006
• Unscored —
  CVE-2006-0744

  Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports a…

  Apr 18, 2006
• Unscored —
  CVE-2006-1056

  The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation Authent…

  Apr 20, 2006
• Unscored —
  CVE-2006-1242

  The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RS…

  Mar 15, 2006
• Unscored —
  CVE-2006-1368

  Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cau…

  Mar 23, 2006
• Unscored —
  CVE-2006-1523

  The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other v…

  Apr 12, 2006
• Unscored —
  CVE-2006-1524

  madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local use…

  Apr 19, 2006
• Unscored —
  CVE-2006-1525

  ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a reques…

  Apr 19, 2006
• Unscored —
  CVE-2006-1857

  Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) a…

  May 22, 2006
• Unscored —
  CVE-2006-1858

  SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute…

  May 22, 2006
• Unscored —
  CVE-2006-1863 Public exploit

  Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions …

  Apr 25, 2006
• Unscored —
  CVE-2006-1864 Public exploit

  Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions…

  Apr 26, 2006
• Unscored —
  CVE-2006-2271

  The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kern…

  May 9, 2006
• Unscored —
  CVE-2006-2272

  Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP f…

  May 9, 2006
• Unscored —
  CVE-2006-2274

  Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) v…

  May 9, 2006