Vulnerabilities > Linux > Low

DATE CVE VULNERABILITY TITLE RISK
2006-01-31 CVE-2006-0482 Local Denial Of Service vulnerability in Linux Kernel Get_Compat_Timespec and PTrace
Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date -s" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call.
local
low complexity
linux
2.1
2006-01-06 CVE-2006-0095 Local Information Disclosure vulnerability in Linux Kernel DM-Crypt
dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.
local
low complexity
linux
2.1
2005-12-31 CVE-2005-4352 The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
local
low complexity
linux netbsd
2.1
2005-12-31 CVE-2005-0136 Unspecified vulnerability in Linux Kernel
The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.
local
low complexity
linux
2.1
2005-10-25 CVE-2005-2708 Resource Management Errors vulnerability in Linux Kernel
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.
local
low complexity
linux CWE-399
2.1
2005-09-30 CVE-2005-3110 Multiple Security vulnerability in Linux Kernel 2.6.0
Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked.
network
high complexity
linux
2.6
2005-09-26 CVE-2005-3055 Improper Input Validation vulnerability in multiple products
Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.
local
low complexity
linux debian CWE-20
2.1
2005-09-14 CVE-2005-2492 Permissions, Privileges, and Access Controls vulnerability in multiple products
The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.
local
low complexity
canonical redhat linux CWE-264
3.6
2005-09-14 CVE-2005-1913 Local Denial Of Service vulnerability in Linux Kernel Subthread Exec
The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist.
local
low complexity
linux
2.1
2005-09-09 CVE-2005-2873 Remote Denial of Service vulnerability in Linux Kernel Netfilter Ipt_recent
The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.
local
low complexity
linux
2.1