Search CVE reports

Toggle filters

1 – 10 of 220 results

CVE-2008-2729

Low priority
Fixed

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-1514

Medium priority
Not affected

arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in...

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-1367

Low priority
Not affected

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI...

7 affected packages

gcc-4.3, glibc, linux, linux-source-2.6.15, linux-source-2.6.17...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gcc-4.3 — — — —
glibc — — — —
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show all 7 packages Show less packages

CVE-2008-0731

Low priority
Not affected

The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow attackers to trigger the unconfining of an apparmored task.

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-0600

High priority
Fixed

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system...

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-0598

Low priority
Fixed

Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-0352

Low priority
Not affected

The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram).

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-0163

Low priority
Not affected

Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc.

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-0010

High priority
Not affected

The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages

CVE-2008-0009

High priority
Not affected

The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.

5 affected packages

linux, linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20, linux-source-2.6.22

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — —
linux-source-2.6.15 — — — —
linux-source-2.6.17 — — — —
linux-source-2.6.20 — — — —
linux-source-2.6.22 — — — —
Show less packages
  1. Previous page
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. Next page
Export to JSON