linux-2.6.24 - several vulnerabilities

Fixed packages 1

Vulnerabilities 18

• Unscored —
  CVE-2009-2691

  The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps…

  Aug 14, 2009
• Unscored —
  CVE-2009-2695

  The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory…

  Aug 28, 2009
• Unscored —
  CVE-2009-3080

  Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows l…

  Nov 20, 2009
• Unscored —
  CVE-2009-3726 Public exploit EPSS 12%

  The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remot…

  Nov 9, 2009
• Unscored —
  CVE-2009-3889

  The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which al…

  Nov 16, 2009
• Unscored —
  CVE-2009-4005

  The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to…

  Nov 20, 2009
• Unscored —
  CVE-2009-4020

  Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecif…

  Dec 4, 2009
• Unscored —
  CVE-2009-4021

  The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow a…

  Nov 25, 2009
• Unscored —
  CVE-2009-4138

  drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users…

  Dec 16, 2009
• Unscored —
  CVE-2009-4308

  The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-…

  Dec 13, 2009
• Unscored —
  CVE-2009-4536

  drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames tha…

  Jan 12, 2010
• Unscored —
  CVE-2009-4538

  drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the s…

  Jan 12, 2010
• Unscored —
  CVE-2010-0003

  The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print…

  Jan 26, 2010
• Unscored —
  CVE-2010-0007

  net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4…

  Jan 19, 2010
• Unscored —
  CVE-2010-0291

  The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling …

  Feb 15, 2010
• Unscored —
  CVE-2010-0410

  drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memo…

  Feb 21, 2010
• Unscored —
  CVE-2010-0415 Public exploit

  The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which a…

  Feb 17, 2010
• Unscored —
  CVE-2010-0622

  The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unl…

  Feb 15, 2010