Vulnerabilities > Linux > High

DATE CVE VULNERABILITY TITLE RISK
2004-12-31 CVE-2004-2536 Local IO Access Inheritance vulnerability in Linux Kernel
The exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers, access restricted memory locations, and possibly gain privileges.
network
low complexity
linux
7.5
2004-12-31 CVE-2004-2013 Integer Overflow or Wraparound vulnerability in Linux Kernel
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.
local
low complexity
linux CWE-190
7.8
2004-12-31 CVE-2004-1144 Unspecified vulnerability in Linux Kernel 2.4.0
Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.
local
low complexity
linux
7.2
2004-12-23 CVE-2004-0816 Integer Underflow (Wrap or Wraparound) vulnerability in Linux Kernel
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.
network
low complexity
linux CWE-191
7.5
2004-12-06 CVE-2004-0496 Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.
local
low complexity
mandrakesoft suse gentoo linux sun
7.2
2004-08-18 CVE-2004-0228 Unspecified vulnerability in Linux Kernel 2.6.0
Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges.
local
low complexity
linux
7.2
2004-08-06 CVE-2004-0658 Unspecified vulnerability in Linux Kernel
Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket.
local
low complexity
linux
7.2
2004-08-06 CVE-2004-0495 Device Driver vulnerability in Linux Kernel
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
local
low complexity
avaya gentoo linux redhat suse conectiva
7.2
2004-08-06 CVE-2004-0447 Local Denial of Service vulnerability in Linux Kernel
Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.
local
low complexity
linux
7.2
2004-07-07 CVE-2004-0424 Integer Overflow vulnerability in Linux Kernel Setsockopt MCAST_MSFILTER
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
local
low complexity
sgi linux slackware
7.2