linux-2.6.24 - several vulnerabilities

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2008-3528

  The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux …

  Sep 27, 2008
• Unscored —
  CVE-2008-4554

  The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have…

  Oct 15, 2008
• Unscored —
  CVE-2008-4576

  sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that …

  Oct 15, 2008
• Unscored —
  CVE-2008-4618

  The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly hand…

  Oct 20, 2008
• Unscored —
  CVE-2008-4933

  Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows a…

  Nov 5, 2008
• Unscored —
  CVE-2008-4934

  The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certa…

  Nov 5, 2008
• Unscored —
  CVE-2008-5025

  Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1…

  Nov 17, 2008
• Unscored —
  CVE-2008-5029

  The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive…

  Nov 10, 2008
• Unscored —
  CVE-2008-5134

  Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in th…

  Nov 18, 2008
• Unscored —
  CVE-2008-5182

  The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown …

  Nov 21, 2008
• Unscored —
  CVE-2008-5300

  Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number…

  Dec 1, 2008