fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Fixed packages 3

Vulnerabilities 11

• Unscored —
  CVE-2008-3527

  arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.…

  Nov 5, 2008
• Unscored —
  CVE-2008-3528

  The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux …

  Sep 27, 2008
• Unscored —
  CVE-2008-4554

  The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have…

  Oct 15, 2008
• Unscored —
  CVE-2008-4576

  sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that …

  Oct 15, 2008
• Unscored —
  CVE-2008-4933

  Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows a…

  Nov 5, 2008
• Unscored —
  CVE-2008-4934

  The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certa…

  Nov 5, 2008
• Unscored —
  CVE-2008-5025

  Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1…

  Nov 17, 2008
• Unscored —
  CVE-2008-5029

  The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive…

  Nov 10, 2008
• Unscored —
  CVE-2008-5079 Public exploit

  net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of ser…

  Dec 9, 2008
• Unscored —
  CVE-2008-5182

  The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown …

  Nov 21, 2008
• Unscored —
  CVE-2008-5300

  Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number…

  Dec 1, 2008