kernel-source-2.6.8 - several

Fixed packages 10

Vulnerabilities 27

• Medium 4.7
  CVE-2005-3106

  Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), mig…

  Sep 30, 2005
• Unscored —
  CVE-2004-2302

  Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users t…

  Aug 8, 2005
• Unscored —
  CVE-2005-0756

  ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to ca…

  Jun 14, 2005
• Unscored —
  CVE-2005-0757

  The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle cer…

  May 18, 2005
• Unscored —
  CVE-2005-1265

  The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end addr…

  Jun 14, 2005
• Unscored —
  CVE-2005-1761

  Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via pt…

  Aug 5, 2005
• Unscored —
  CVE-2005-1762

  The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of s…

  Jun 30, 2005
• Unscored —
  CVE-2005-1763

  Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel me…

  Jun 14, 2005
• Unscored —
  CVE-2005-1765

  syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allow…

  Jun 30, 2005
• Unscored —
  CVE-2005-1767

  traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local use…

  Aug 5, 2005
• Unscored —
  CVE-2005-2456

  Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cau…

  Aug 4, 2005
• Unscored —
  CVE-2005-2458

  inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service…

  Aug 22, 2005
• Unscored —
  CVE-2005-2459

  The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, …

  Aug 22, 2005
• Unscored —
  CVE-2005-2548

  vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops fr…

  Aug 12, 2005
• Unscored —
  CVE-2005-2801

  xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when…

  Sep 6, 2005
• Unscored —
  CVE-2005-2872

  The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AM…

  Sep 9, 2005
• Unscored —
  CVE-2005-3105

  The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coher…

  Sep 30, 2005
• Unscored —
  CVE-2005-3107

  fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local us…

  Sep 30, 2005
• Unscored —
  CVE-2005-3108

  mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak …

  Sep 30, 2005
• Unscored —
  CVE-2005-3109

  The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to…

  Sep 30, 2005
• Unscored —
  CVE-2005-3110

  Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating …

  Sep 30, 2005
• Unscored —
  CVE-2005-3271

  Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resour…

  Oct 20, 2005
• Unscored —
  CVE-2005-3272

  Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already…

  Oct 20, 2005
• Unscored —
  CVE-2005-3273

  The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.…

  Oct 20, 2005
• Unscored —
  CVE-2005-3274

  Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, …

  Oct 20, 2005
• Unscored —
  CVE-2005-3275

  The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-…

  Oct 20, 2005
• Unscored —
  CVE-2005-3276

  The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure b…

  Oct 20, 2005