Vulnerabilities > Linux

DATE CVE VULNERABILITY TITLE RISK
2005-05-17 CVE-2005-1264 Local Memory Corruption vulnerability in Multiple Linux Kernel IOCTL Handlers
Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.
local
low complexity
linux
7.2
2005-05-11 CVE-2005-1263 Local Buffer Overflow vulnerability in Linux Kernel ELF Core Dump
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
local
low complexity
linux
7.2
2005-05-02 CVE-2005-1369 Unspecified vulnerability in Linux Kernel
The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function.
local
low complexity
linux
2.1
2005-05-02 CVE-2005-1368 Unspecified vulnerability in Linux Kernel
The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP.
local
high complexity
linux
1.2
2005-05-02 CVE-2005-1041 Local Denial of Service vulnerability in Linux Kernel 2.6.20.1
The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.
local
low complexity
linux
2.1
2005-05-02 CVE-2005-0916 Local Denial Of Service vulnerability in Linux Kernel 2.6.11
AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.
local
low complexity
linux
2.1
2005-05-02 CVE-2005-0867 Unspecified vulnerability in Linux Kernel 2.6.0
Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.
local
low complexity
linux
7.2
2005-05-02 CVE-2005-0815 ISO9660 Filesystem Handling vulnerability in Linux Kernel
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.
network
low complexity
linux
6.4
2005-05-02 CVE-2005-0449 Improper Input Validation vulnerability in Linux Kernel
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.
network
linux CWE-20
7.1
2005-05-02 CVE-2005-0400 Unspecified vulnerability in Linux Kernel
The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
local
low complexity
linux
2.1