linux-2.6 - several issues

Fixed packages 1

Vulnerabilities 33

• Unscored —
  CVE-2010-2963 Public exploit

  drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on …

  Nov 26, 2010
• Unscored —
  CVE-2010-3067

  Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows lo…

  Sep 21, 2010
• Unscored —
  CVE-2010-3296

  The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not prop…

  Sep 30, 2010
• Unscored —
  CVE-2010-3297

  The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a…

  Sep 30, 2010
• Unscored —
  CVE-2010-3310

  Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow loca…

  Sep 29, 2010
• Unscored —
  CVE-2010-3432

  The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializa…

  Nov 20, 2010
• Unscored —
  CVE-2010-3437 Public exploit

  Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before …

  Oct 4, 2010
• Unscored —
  CVE-2010-3442

  Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-ne…

  Oct 4, 2010
• Unscored —
  CVE-2010-3448

  drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is …

  Jan 3, 2011
• Unscored —
  CVE-2010-3477

  The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functi…

  Sep 21, 2010
• Unscored —
  CVE-2010-3705

  The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate th…

  Nov 26, 2010
• Unscored —
  CVE-2010-3848 Public exploit

  Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.…

  Dec 30, 2010
• Unscored —
  CVE-2010-3849 Public exploit

  The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is co…

  Dec 30, 2010
• Unscored —
  CVE-2010-3850 Public exploit

  The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_AD…

  Dec 30, 2010
• Unscored —
  CVE-2010-3858 Public exploit

  The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does …

  Nov 30, 2010
• Unscored —
  CVE-2010-3859

  Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to …

  Dec 29, 2010
• Unscored —
  CVE-2010-3873

  The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote att…

  Jan 3, 2011
• Unscored —
  CVE-2010-3874

  Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller A…

  Dec 29, 2010
• Unscored —
  CVE-2010-3875

  The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain str…

  Jan 3, 2011
• Unscored —
  CVE-2010-3876

  net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, wh…

  Jan 3, 2011
• Unscored —
  CVE-2010-3877

  The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structur…

  Jan 3, 2011
• Unscored —
  CVE-2010-3880

  net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows loc…

  Dec 10, 2010
• Unscored —
  CVE-2010-4072

  The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain struct…

  Nov 29, 2010
• Unscored —
  CVE-2010-4073 Public exploit

  The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local user…

  Nov 29, 2010
• Unscored —
  CVE-2010-4074

  The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which a…

  Nov 29, 2010
• Unscored —
  CVE-2010-4078

  The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initia…

  Nov 29, 2010
• Unscored —
  CVE-2010-4079

  The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly …

  Nov 29, 2010
• Unscored —
  CVE-2010-4080

  The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize…

  Nov 30, 2010
• Unscored —
  CVE-2010-4081

  The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initiali…

  Nov 30, 2010
• Unscored —
  CVE-2010-4083

  The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure,…

  Nov 30, 2010
• Unscored —
  CVE-2010-4157

  Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platf…

  Dec 10, 2010
• Unscored —
  CVE-2010-4160

  Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg fun…

  Jan 7, 2011
• Unscored —
  CVE-2010-4164

  Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before…

  Jan 3, 2011