Linux » Linux Kernel : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
351	CVE-2013-1059		DoS	2013-07-08	2014-01-03	7.8	None	Remote	Low	Not required	None	None	Complete
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation.
352	CVE-2013-0913	189	DoS Overflow	2013-03-18	2013-06-20	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
353	CVE-2013-0894	119	DoS Overflow	2013-02-23	2013-04-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.
354	CVE-2012-6704	119	DoS Overflow Mem. Corr.	2016-12-28	2016-12-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
355	CVE-2012-6703		DoS Overflow	2016-06-29	2017-08-31	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
356	CVE-2012-6701		DoS Overflow	2016-05-02	2018-06-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.
357	CVE-2012-6689	284		2016-05-02	2016-11-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.
358	CVE-2012-6638	399	DoS	2014-02-15	2014-02-18	7.8	None	Remote	Low	Not required	None	None	Complete
The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.
359	CVE-2012-3412	189	DoS	2012-10-03	2013-08-17	7.8	None	Remote	Low	Not required	None	None	Complete
The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
360	CVE-2012-3400	119	DoS Overflow	2012-10-03	2016-12-07	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted UDF filesystem.
361	CVE-2012-2744		DoS	2012-08-09	2013-03-21	7.8	None	Remote	Low	Not required	None	None	Complete
net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.
362	CVE-2012-2319	264	Overflow +Priv	2012-05-17	2015-05-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
363	CVE-2012-2136	20	DoS Overflow +Priv	2012-08-09	2013-03-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
364	CVE-2012-2123	264	Bypass	2012-05-17	2017-12-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
365	CVE-2012-2100	189	DoS	2012-07-03	2013-02-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
366	CVE-2012-1097		DoS	2012-05-17	2018-01-17	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.
367	CVE-2012-0207	399	DoS	2012-05-17	2012-05-17	7.8	None	Remote	Low	Not required	None	None	Complete
The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
368	CVE-2012-0044	189	DoS Overflow +Priv Mem. Corr.	2012-05-17	2013-04-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call.
369	CVE-2012-0028	264	DoS +Priv	2012-06-21	2012-06-22	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.
370	CVE-2011-4913	20	DoS Overflow Mem. Corr.	2012-06-21	2016-08-18	7.8	None	Remote	Low	Not required	None	None	Complete
The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.
371	CVE-2011-4374	189	Exec Code Overflow	2012-01-19	2017-09-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.
372	CVE-2011-4348	362	DoS	2013-06-08	2013-07-25	7.1	None	Remote	Medium	Not required	None	None	Complete
Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.
373	CVE-2011-4330	119	DoS Exec Code Overflow	2012-01-27	2012-04-16	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafted len field.
374	CVE-2011-4326	399	DoS	2012-05-17	2015-05-05	7.1	None	Remote	Medium	Not required	None	None	Complete
The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
375	CVE-2011-2699		DoS	2012-05-24	2013-10-10	7.8	None	Remote	Low	Not required	None	None	Complete
The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
376	CVE-2011-2525		DoS	2012-02-01	2014-01-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
377	CVE-2011-2517	119	Overflow +Priv	2012-05-24	2013-12-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value.
378	CVE-2011-2482		DoS	2013-06-08	2013-12-30	7.8	None	Remote	Low	Not required	None	None	Complete
A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
379	CVE-2011-2211	264	+Priv	2012-06-13	2012-06-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The osf_wait4 function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an incorrect pointer, which allows local users to gain privileges by writing a certain integer value to kernel memory.
380	CVE-2011-2189	399	DoS	2011-10-10	2012-09-17	7.8	None	Remote	Low	Not required	None	None	Complete
net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.
381	CVE-2011-2184		DoS	2011-09-06	2012-03-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
382	CVE-2011-2182	119	Overflow +Priv +Info	2012-06-13	2016-12-07	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.
383	CVE-2011-1770	189	DoS	2011-06-24	2012-03-19	7.8	None	Remote	Low	Not required	None	None	Complete
Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.
384	CVE-2011-1495	20	DoS +Priv Mem. Corr. +Info	2011-05-03	2015-05-11	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
385	CVE-2011-1493		DoS Mem. Corr.	2012-06-21	2015-05-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.
386	CVE-2011-1477	119	DoS Overflow +Priv Mem. Corr.	2012-06-21	2017-11-22	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer.
387	CVE-2011-1180	119	DoS Overflow Mem. Corr.	2013-06-08	2013-06-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.
388	CVE-2011-1093		DoS	2011-07-18	2015-05-05	7.8	None	Remote	Low	Not required	None	None	Complete
The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.
389	CVE-2011-1076		DoS	2011-10-04	2012-05-14	7.8	None	Remote	Low	Not required	None	None	Complete
net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.
390	CVE-2011-1017	119	Overflow +Priv +Info	2011-03-01	2012-03-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table.
391	CVE-2011-1013	189	DoS	2011-05-09	2017-08-16	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.
392	CVE-2011-0709		DoS	2011-02-18	2012-03-19	7.8	None	Remote	Low	Not required	None	None	Complete
The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table.
393	CVE-2010-4526	362	DoS	2011-01-10	2017-08-16	7.1	None	Remote	Medium	Not required	None	None	Complete
Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.
394	CVE-2010-4342	399	DoS	2010-12-30	2012-03-19	7.1	None	Remote	Medium	Not required	None	None	Complete
The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.
395	CVE-2010-4164	189	DoS	2011-01-03	2012-03-19	7.8	None	Remote	Low	Not required	None	None	Complete
Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C, or (4) X25_FAC_CLASS_D facility data, a different vulnerability than CVE-2010-3873.
396	CVE-2010-3904	20	+Priv	2010-12-06	2018-05-23	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
397	CVE-2010-3873	399	DoS Mem. Corr.	2011-01-03	2013-06-20	7.8	None	Remote	Low	Not required	None	None	Complete
The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possibly have unspecified other impact via malformed (1) X25_FAC_CALLING_AE or (2) X25_FAC_CALLED_AE data, related to net/x25/x25_facilities.c and net/x25/x25_in.c, a different vulnerability than CVE-2010-4164.
398	CVE-2010-3865	189	DoS Exec Code Overflow	2011-01-10	2017-08-16	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request, which triggers a buffer overflow.
399	CVE-2010-3432		DoS	2010-11-22	2012-03-19	7.8	None	Remote	Low	Not required	None	None	Complete
The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.
400	CVE-2010-3301		+Priv	2010-09-22	2012-03-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.

Total number of vulnerabilities : 560 Page : 1 2 3 4 5 6 7 8 (This Page)9 10 11 12