kernelimage-2.4.27 - several issues

Fixed packages 20

Vulnerabilities 20

• Unscored —
  CVE-2004-2731

  Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, …

  Oct 9, 2007
• Unscored —
  CVE-2006-4814 Public exploit

  The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspeci…

  Dec 20, 2006
• Unscored —
  CVE-2006-5753

  Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local use…

  Jan 30, 2007
• Unscored —
  CVE-2006-5823

  The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed…

  Nov 9, 2006
• Unscored —
  CVE-2006-6053

  The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 s…

  Nov 22, 2006
• Unscored —
  CVE-2006-6054

  The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 str…

  Nov 22, 2006
• Unscored —
  CVE-2006-6106

  Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in t…

  Dec 19, 2006
• Unscored —
  CVE-2007-1353

  The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-depen…

  Apr 24, 2007
• Unscored —
  CVE-2007-1592

  net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening T…

  Mar 22, 2007
• Unscored —
  CVE-2007-2172

  A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead o…

  Apr 22, 2007
• Unscored —
  CVE-2007-2525

  Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local …

  May 8, 2007
• Unscored —
  CVE-2007-3848

  Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running …

  Aug 14, 2007
• Unscored —
  CVE-2007-4308

  The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel bef…

  Aug 13, 2007
• Unscored —
  CVE-2007-4311

  The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operati…

  Aug 13, 2007
• Unscored —
  CVE-2007-5093

  The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user spac…

  Sep 26, 2007
• Unscored —
  CVE-2007-6063

  Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unkn…

  Nov 21, 2007
• Unscored —
  CVE-2007-6151

  The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a c…

  Dec 15, 2007
• Unscored —
  CVE-2007-6206

  The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, do…

  Dec 4, 2007
• Unscored —
  CVE-2007-6694

  The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might …

  Jan 29, 2008
• Unscored —
  CVE-2008-0007

  Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range che…

  Feb 8, 2008