Vulnerabilities > Linux > Linux Kernel > Medium

DATE CVE VULNERABILITY TITLE RISK
2002-01-31 CVE-2002-0046 Remote Security vulnerability in Linux Kernel 2.6.20.1
Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.
network
low complexity
linux
5.0
2001-12-06 CVE-2001-0851 Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
network
low complexity
caldera linux suse
5.0
2001-07-07 CVE-2001-1244 Denial of Service vulnerability in Multiple Vendor Small TCP MSS
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
network
low complexity
freebsd hp linux microsoft netbsd openbsd sun
5.0
2001-05-03 CVE-2001-0316 Unspecified vulnerability in Linux Kernel 2.2.0/2.4.0
Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call.
local
low complexity
linux
4.6
2001-04-17 CVE-2001-1391 Off-by-one Error vulnerability in Linux Kernel
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.
local
low complexity
linux CWE-193
5.5
2001-04-17 CVE-2001-1390 Local Security vulnerability in kernel
Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.
local
high complexity
linux
6.2
2000-03-27 CVE-2000-0289 IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
network
low complexity
debian linux redhat
5.0
1999-12-31 CVE-1999-1339 Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
network
low complexity
freebsd linux
5.0
1999-12-08 CVE-1999-0986 The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
network
low complexity
debian linux redhat
5.0
1999-10-22 CVE-1999-1341 Unspecified vulnerability in Linux Kernel
Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.
local
low complexity
linux
4.6