kernel-source-2.6.8 - several vulnerabilities

Fixed packages 2

Vulnerabilities 16

• Unscored —
  CVE-2004-2660

  Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory …

  May 26, 2006
• Unscored —
  CVE-2005-4798

  Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a deni…

  May 9, 2006
• Unscored —
  CVE-2006-1052

  The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the…

  May 5, 2006
• Unscored —
  CVE-2006-1343

  net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3prot…

  Mar 21, 2006
• Unscored —
  CVE-2006-1528

  Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg drive…

  May 18, 2006
• Unscored —
  CVE-2006-1855

  choose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a…

  May 18, 2006
• Unscored —
  CVE-2006-1856

  Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) fi…

  May 19, 2006
• Unscored —
  CVE-2006-2444 Public exploit EPSS 23%

  The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause…

  May 25, 2006
• Unscored —
  CVE-2006-2446

  Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, an…

  Aug 15, 2006
• Unscored —
  CVE-2006-2935

  The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions,…

  Jul 5, 2006
• Unscored —
  CVE-2006-2936

  The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows loc…

  Jul 10, 2006
• Unscored —
  CVE-2006-3468 Public exploit EPSS 16%

  Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system pan…

  Jul 18, 2006
• Unscored —
  CVE-2006-3745

  Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.…

  Aug 23, 2006
• Unscored —
  CVE-2006-4093

  Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a de…

  Aug 21, 2006
• Unscored —
  CVE-2006-4145

  The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a deni…

  Aug 21, 2006
• Unscored —
  CVE-2006-4535

  The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an …

  Sep 19, 2006