2.6.0 Test1 * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-1583	399	DoS	2012-06-16	2016-08-23	5.0	None	Remote	Low	Not required	None	None	Partial
Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
2	CVE-2009-2406	119	DoS Overflow +Priv	2009-07-31	2018-10-30	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.
3	CVE-2009-1389	119	DoS Overflow Mem. Corr.	2009-06-16	2018-10-30	7.8	None	Remote	Low	Not required	None	None	Complete
Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.
4	CVE-2009-0778		DoS	2009-03-12	2020-08-28	7.1	None	Remote	Medium	Not required	None	None	Complete
The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."
5	CVE-2008-4609	16	DoS	2008-10-20	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
6	CVE-2008-2750	20	DoS Mem. Corr.	2008-06-18	2018-10-30	7.8	None	Remote	Low	Not required	None	None	Complete
The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable.
7	CVE-2008-1673	119	DoS Exec Code Overflow	2008-06-10	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
8	CVE-2008-1669	94	Exec Code	2008-05-08	2018-10-30	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."
9	CVE-2007-5093	399	DoS	2007-09-26	2018-10-30	4.0	None	Local	High	Not required	None	None	Complete
The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
10	CVE-2007-2876		DoS	2007-06-11	2018-10-30	6.1	None	Local Network	Low	Not required	None	None	Complete
The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.
11	CVE-2007-2453			2007-06-11	2018-10-30	1.2	None	Local	High	Not required	Partial	None	None
The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.
12	CVE-2006-5823		DoS Mem. Corr.	2006-11-09	2018-10-30	4.0	None	Local	High	Not required	None	None	Complete
The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs.
13	CVE-2006-5757	399	DoS	2006-11-06	2017-10-11	1.2	None	Local	High	Not required	None	None	Partial
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.
14	CVE-2006-5701		DoS	2006-11-03	2017-07-20	4.9	None	Local	Low	Not required	None	None	Complete
Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a crafted squashfs filesystem.
15	CVE-2006-5174			2006-10-10	2018-10-30	2.1	None	Local	Low	Not required	Partial	None	None
The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.
16	CVE-2006-4813			2006-10-12	2018-10-30	2.1	None	Local	Low	Not required	Partial	None	None
The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.
17	CVE-2006-3741		DoS	2006-10-10	2018-10-30	4.9	None	Local	Low	Not required	None	None	Complete
The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption).
18	CVE-2006-3468		DoS	2006-07-21	2018-10-30	7.8	None	Remote	Low	Not required	None	None	Complete
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only.
19	CVE-2006-3085		DoS	2006-06-23	2018-10-18	7.8	None	Remote	Low	Not required	None	None	Complete
xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via an SCTP chunk with a 0 length.
20	CVE-2006-2448		DoS	2006-06-23	2018-10-18	5.6	None	Local	High	Not required	Complete	None	Complete
Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).
21	CVE-2006-2445		DoS	2006-06-23	2018-10-18	4.0	None	Local	High	Not required	None	None	Complete
Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting.
22	CVE-2006-2444		DoS	2006-05-25	2018-10-30	7.8	None	Remote	Low	Not required	None	None	Complete
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.
23	CVE-2006-2071		Bypass	2006-04-27	2018-10-18	2.1	None	Local	Low	Not required	None	Partial	None
Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.
24	CVE-2006-1858	20	DoS Exec Code	2006-05-22	2017-10-11	7.8	None	Remote	Low	Not required	None	None	Complete
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
25	CVE-2006-1857	119	DoS Exec Code Overflow	2006-05-22	2017-10-11	9.0	None	Remote	Low	Not required	Partial	Partial	Complete
Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.
26	CVE-2006-1856		Bypass	2006-05-19	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.
27	CVE-2006-1528	20	DoS	2006-05-18	2018-10-30	4.9	None	Local	Low	Not required	None	None	Complete
Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.
28	CVE-2006-1242		Bypass	2006-03-15	2018-10-18	5.0	None	Remote	Low	Not required	Partial	None	None
The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
29	CVE-2006-1066		DoS	2006-03-27	2018-10-03	1.2	None	Local	High	Not required	None	None	Partial
Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call.
30	CVE-2006-1056	310	+Info	2006-04-20	2018-10-30	2.1	None	Local	Low	Not required	Partial	None	None
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
31	CVE-2006-1052			2006-05-05	2018-10-30	2.1	None	Local	Low	Not required	None	None	Partial
The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.
32	CVE-2006-0744	20		2006-04-18	2018-10-30	4.9	None	Local	Low	Not required	None	None	Complete
Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS.
33	CVE-2006-0742		DoS	2006-03-09	2018-10-03	4.6	None	Local	Low	???	None	None	Complete
The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems.
34	CVE-2006-0741		DoS	2006-03-07	2018-10-03	1.2	None	Local	High	Not required	None	None	Partial
Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors related to a "bad elf entry address."
35	CVE-2006-0558		DoS	2006-04-14	2017-10-11	4.9	None	Local	Low	Not required	None	None	Complete
perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function.
36	CVE-2006-0555		DoS	2006-03-07	2018-10-03	2.1	None	Local	Low	Not required	None	None	Partial
The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).
37	CVE-2006-0554		+Info	2006-03-07	2018-10-03	1.7	None	Local	Low	???	None	Partial	None
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data.
38	CVE-2006-0482		DoS	2006-01-31	2017-07-20	2.1	None	Local	Low	Not required	None	None	Partial
Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date -s" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call.
39	CVE-2006-0457		DoS	2006-03-14	2018-10-03	7.1	None	Remote	High	Not required	Complete	None	Complete
Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
40	CVE-2006-0456		DoS	2006-06-27	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a denial of service via unknown vectors.
41	CVE-2006-0038	189	Overflow	2006-03-22	2017-10-11	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
42	CVE-2005-4886	189	DoS	2010-02-26	2018-10-30	7.8	None	Remote	Low	Not required	None	None	Complete
The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors associated with an incorrect call to the ipv6_skip_exthdr function.
43	CVE-2005-4811		DoS	2005-12-31	2017-10-11	4.9	None	Local	Low	Not required	None	None	Complete
The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service (crash) by triggering an mmap error before a prefault, which causes an error in the unmap_hugepage_area function.
44	CVE-2005-4635		DoS	2005-12-31	2011-03-08	5.0	None	Remote	Low	Not required	None	None	Partial
The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service (invalid memory reference) via malformed fib_lookup netlink messages.
45	CVE-2005-4618		DoS Overflow	2005-12-31	2018-10-03	3.6	None	Local	Low	Not required	None	Partial	Partial
Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.
46	CVE-2005-4352		Bypass	2005-12-31	2018-10-19	2.1	None	Local	Low	Not required	None	Partial	None
The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
47	CVE-2005-3660		DoS	2005-12-22	2017-07-11	4.9	None	Local	Low	Not required	None	None	Complete
Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference.
48	CVE-2005-3359		DoS	2005-12-31	2018-10-03	4.9	None	Local	Low	Not required	None	None	Complete
The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.
49	CVE-2005-3044		DoS	2005-09-22	2018-10-19	2.1	None	Local	Low	Not required	None	None	Partial
Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems.
50	CVE-2005-2873			2005-09-09	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.

Total number of vulnerabilities : 100 Page : 1 (This Page)2