2.4.3 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2009-3726	399	DoS	2009-11-09	2023-02-13	7.8	None	Remote	Low	Not required	None	None	Complete
The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.
2	CVE-2008-4609	16	DoS	2008-10-20	2022-12-14	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
3	CVE-2008-1673	119	DoS Exec Code Overflow	2008-06-10	2023-02-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
4	CVE-2006-4814	399		2006-12-20	2017-10-11	4.6	None	Local	Low	???	None	None	Complete
The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
5	CVE-2006-3741		DoS	2006-10-10	2023-02-13	4.9	None	Local	Low	Not required	None	None	Complete
The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption).
6	CVE-2006-2071		Bypass	2006-04-27	2018-10-18	2.1	None	Local	Low	Not required	None	Partial	None
Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.
7	CVE-2006-1242		Bypass	2006-03-15	2018-10-18	5.0	None	Remote	Low	Not required	Partial	None	None
The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
8	CVE-2006-0096			2006-01-06	2018-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels.
9	CVE-2005-4881	200	+Info	2009-10-19	2017-10-11	4.9	None	Local	Low	Not required	Complete	None	None
The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
10	CVE-2005-4798		DoS Overflow	2005-12-31	2017-10-11	5.0	None	Remote	Low	Not required	None	None	Partial
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.
11	CVE-2005-3806	399	DoS	2005-11-25	2018-10-19	6.6	None	Local	Low	Not required	None	Complete	Complete
The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.
12	CVE-2005-3660		DoS	2005-12-22	2017-07-11	4.9	None	Local	Low	Not required	None	None	Complete
Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference.
13	CVE-2005-3274		DoS	2005-10-21	2018-10-19	1.2	None	Local	High	Not required	None	None	Partial
Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.
14	CVE-2005-3273	264		2005-10-21	2018-10-19	5.0	None	Remote	Low	Not required	None	Partial	None
The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.
15	CVE-2005-2709	399	DoS Exec Code	2005-11-20	2018-10-19	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
16	CVE-2005-2708	399	DoS	2005-10-25	2018-10-19	2.1	None	Local	Low	Not required	None	None	Partial
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.
17	CVE-2005-2553		DoS	2005-08-12	2023-02-13	2.1	None	Local	Low	Not required	None	None	Partial
The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program.
18	CVE-2005-1768		DoS Exec Code Overflow	2005-07-11	2017-10-11	3.7	None	Local	High	Not required	Partial	Partial	Partial
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.
19	CVE-2005-1263		Exec Code Overflow	2005-05-11	2018-10-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
20	CVE-2005-0815		DoS	2005-05-02	2017-10-11	6.4	None	Remote	Low	Not required	None	Partial	Partial
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.
21	CVE-2005-0749		DoS	2005-04-01	2018-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.
22	CVE-2005-0504	119	Exec Code Overflow	2005-03-14	2017-10-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.
23	CVE-2005-0489		DoS	2005-12-31	2008-09-05	4.9	None	Local	Low	Not required	None	None	Complete
The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory.
24	CVE-2005-0207		DoS	2005-05-02	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.
25	CVE-2005-0179		DoS Bypass	2005-03-07	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call.
26	CVE-2005-0178		DoS	2005-03-07	2017-10-11	6.2	None	Local	High	Not required	Complete	Complete	Complete
Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores.
27	CVE-2005-0124		DoS Exec Code Overflow	2005-04-14	2018-10-19	2.1	None	Local	Low	Not required	None	None	Partial
The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.
28	CVE-2005-0003		DoS Exec Code	2005-04-14	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.
29	CVE-2005-0001		Exec Code	2005-05-02	2017-10-11	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.
30	CVE-2004-2731	189	Exec Code Overflow	2004-12-31	2008-09-05	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
31	CVE-2004-2135			2004-05-26	2016-10-18	2.1	None	Local	Low	Not required	Partial	None	None
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
32	CVE-2004-2013		Exec Code Overflow	2004-12-31	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.
33	CVE-2004-1335		DoS	2004-12-15	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.
34	CVE-2004-1334		DoS Overflow	2004-12-15	2017-07-11	2.1	None	Local	Low	Not required	None	None	Partial
Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow.
35	CVE-2004-1333		DoS Overflow	2004-12-15	2018-10-03	2.1	None	Local	Low	Not required	None	None	Partial
Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.
36	CVE-2004-1237		DoS	2005-04-14	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.
37	CVE-2004-1235		Exec Code	2005-04-14	2017-10-11	6.2	None	Local	High	Not required	Complete	Complete	Complete
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
38	CVE-2004-1234		DoS	2004-12-31	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.
39	CVE-2004-1137		DoS Exec Code	2005-01-10	2018-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
40	CVE-2004-1074		DoS	2005-01-10	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
41	CVE-2004-1073			2005-01-10	2017-10-11	2.1	None	Local	Low	Not required	Partial	None	None
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
42	CVE-2004-1072		DoS Exec Code Overflow	2005-01-10	2017-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
43	CVE-2004-1071		Exec Code	2005-01-10	2017-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
44	CVE-2004-1070		Exec Code	2005-01-10	2017-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
45	CVE-2004-1068		+Priv	2005-01-10	2017-10-11	6.2	None	Local	High	Not required	Complete	Complete	Complete
A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
46	CVE-2004-1016		DoS	2005-01-10	2018-05-03	2.1	None	Local	Low	Not required	None	None	Partial
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.
47	CVE-2004-0997		+Priv	2004-12-31	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors.
48	CVE-2004-0986			2005-03-01	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
49	CVE-2004-0949			2005-01-10	2017-10-11	6.4	None	Remote	Low	Not required	Partial	Partial	None
The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
50	CVE-2004-0883		DoS	2005-01-10	2017-10-11	6.4	None	Remote	Low	Not required	Partial	None	Partial
Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.

Total number of vulnerabilities : 80 Page : 1 (This Page)2