2.6.8 : Security Vulnerabilities

Cpe Name:cpe:/o:linux:linux_kernel:2.6.8

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-1146		DoS	2012-05-17	2013-02-14	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.
2	CVE-2012-1097		DoS	2012-05-17	2013-05-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.
3	CVE-2012-1090	264	DoS	2012-05-17	2013-05-03	4.9	None	Local	Low	Not required	None	None	Complete
The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
4	CVE-2012-0207	399	DoS	2012-05-17	2012-05-17	7.8	None	Remote	Low	Not required	None	None	Complete
The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
5	CVE-2012-0058	399	DoS	2012-05-17	2012-08-18	4.9	None	Local	Low	Not required	None	None	Complete
The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.
6	CVE-2012-0044	189	DoS Overflow +Priv Mem. Corr.	2012-05-17	2013-04-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call.
7	CVE-2012-0038	189	DoS Overflow	2012-05-17	2012-05-17	4.9	None	Local	Low	Not required	None	None	Complete
Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.
8	CVE-2011-4594		DoS	2012-05-17	2012-05-17	4.9	None	Local	Low	Not required	None	None	Complete
The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference.
9	CVE-2011-4325		DoS	2012-01-27	2012-04-16	4.9	None	Local	Low	Not required	None	None	Complete
The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP.
10	CVE-2011-4112	264	DoS	2012-05-17	2012-05-17	4.9	None	Local	Low	Not required	None	None	Complete
The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface.
11	CVE-2011-4097	189	DoS Overflow	2012-05-17	2012-05-17	4.9	None	Local	Low	Not required	None	None	Complete
Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory.
12	CVE-2011-4087	399	DoS	2013-06-08	2013-06-10	4.3	None	Remote	Medium	Not required	None	None	Partial
The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure, which allows remote attackers to cause a denial of service by leveraging connectivity to a network interface that uses an Ethernet bridge device.
13	CVE-2011-4081		DoS	2012-05-24	2012-05-29	4.9	None	Local	Low	Not required	None	None	Complete
crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
14	CVE-2011-3638		DoS	2013-03-01	2013-03-04	4.0	None	Local	High	Not required	None	None	Complete
fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service (system crash) via vectors involving ext4 umount and mount operations.
15	CVE-2011-3353	119	DoS Overflow	2012-05-24	2012-05-25	4.9	None	Local	Low	Not required	None	None	Complete
Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.
16	CVE-2011-3191	189	DoS Mem. Corr.	2012-05-24	2012-05-25	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
17	CVE-2011-3188		DoS	2012-05-24	2012-10-24	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
18	CVE-2011-2928	20	DoS	2011-08-29	2012-03-22	4.9	None	Local	Low	Not required	None	None	Complete
The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
19	CVE-2011-2918	399	DoS Overflow	2012-05-24	2012-05-29	4.9	None	Local	Low	Not required	None	None	Complete
The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application.
20	CVE-2011-2906	189	DoS Mem. Corr.	2012-05-24	2012-05-29	4.9	None	Local	Low	Not required	None	None	Complete
DISPUTED Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.
21	CVE-2011-2898	264	+Info	2012-05-24	2012-05-29	4.9	None	Local	Low	Not required	Complete	None	None
net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.
22	CVE-2011-2723	399	DoS	2011-09-06	2012-03-19	5.7	None	Local Network	Medium	Not required	None	None	Complete
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
23	CVE-2011-2707	20	+Info	2012-05-24	2012-05-29	4.9	None	Local	Low	Not required	Complete	None	None
The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.
24	CVE-2011-2700	119	DoS Overflow	2011-09-06	2012-03-19	2.1	None	Local	Low	Not required	None	None	Partial
Multiple buffer overflows in the si4713_write_econtrol_string function in drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39.4 on the N900 platform might allow local users to cause a denial of service or have unspecified other impact via a crafted s_ext_ctrls operation with a (1) V4L2_CID_RDS_TX_PS_NAME or (2) V4L2_CID_RDS_TX_RADIO_TEXT control ID.
25	CVE-2011-2699		DoS	2012-05-24	2012-09-07	7.8	None	Remote	Low	Not required	None	None	Complete
The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
26	CVE-2011-2695	189	DoS	2011-07-28	2012-03-19	4.9	None	Local	Low	Not required	None	None	Complete
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.
27	CVE-2011-2689	399	DoS	2011-07-28	2012-03-22	4.9	None	Local	Low	Not required	None	None	Complete
The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.
28	CVE-2011-2534	119	DoS Overflow	2011-06-22	2012-03-19	4.0	None	Local	High	Not required	None	None	Complete
Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character.
29	CVE-2011-2525		DoS	2012-02-01	2012-03-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
30	CVE-2011-2497	189	DoS Overflow Mem. Corr.	2011-08-29	2012-03-19	8.3	None	Local Network	Low	Not required	Complete	Complete	Complete
Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.
31	CVE-2011-2492	200	+Info	2011-07-28	2012-03-19	1.9	None	Local	Medium	Not required	Partial	None	None
The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
32	CVE-2011-2491	399	DoS	2013-03-01	2013-03-04	4.9	None	Local	Low	Not required	None	None	Complete
The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
33	CVE-2011-2484	399	DoS Bypass	2011-06-24	2012-03-19	4.9	None	Local	Low	Not required	None	None	Complete
The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
34	CVE-2011-2482		DoS	2013-06-08	2013-06-10	7.8	None	Remote	Low	Not required	None	None	Complete
A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
35	CVE-2011-2479	399	DoS	2013-03-01	2013-03-04	4.9	None	Local	Low	Not required	None	None	Complete
The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application.
36	CVE-2011-2213	399	DoS	2011-08-29	2012-03-19	4.9	None	Local	Low	Not required	None	None	Complete
The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
37	CVE-2011-2189	399	DoS	2011-10-10	2012-09-17	7.8	None	Remote	Low	Not required	None	None	Complete
net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.
38	CVE-2011-2184		DoS	2011-09-06	2012-03-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
39	CVE-2011-2022	20	DoS +Priv	2011-05-09	2012-03-19	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.
40	CVE-2011-1776	119	DoS Overflow +Info	2011-09-06	2012-05-17	5.6	None	Local	Low	Not required	Partial	None	Complete
The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.
41	CVE-2011-1771		DoS	2011-09-06	2012-03-19	4.7	None	Local	Medium	Not required	None	None	Complete
The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem.
42	CVE-2011-1770	189	DoS	2011-06-24	2012-03-19	7.8	None	Remote	Low	Not required	None	None	Complete
Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.
43	CVE-2011-1748	20	DoS	2011-05-09	2012-04-16	4.9	None	Local	Low	Not required	None	None	Complete
The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
44	CVE-2011-1747	399	DoS	2011-05-09	2012-03-19	4.7	None	Local	Medium	Not required	None	None	Complete
The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.
45	CVE-2011-1746	189	DoS Overflow	2011-05-09	2012-03-19	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local users to trigger buffer overflows, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via vectors related to calls that specify a large number of memory pages.
46	CVE-2011-1745	189	DoS Overflow +Priv	2011-05-09	2012-03-19	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.
47	CVE-2011-1598	20	DoS	2011-05-09	2012-03-19	4.9	None	Local	Low	Not required	None	None	Complete
The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
48	CVE-2011-1593	189	DoS Overflow	2011-05-03	2012-03-19	4.9	None	Local	Low	Not required	None	None	Complete
Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.
49	CVE-2011-1581	20	DoS	2011-05-26	2012-03-19	4.6	None	Local Network	High	Not required	None	None	Complete
The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.
50	CVE-2011-1577	119	DoS Overflow	2011-05-03	2012-04-27	4.9	None	Local	Low	Not required	None	None	Complete
Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.

Total number of vulnerabilities : 398 Page : 1 (This Page)2 3 4 5 6 7 8