Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.2)

References:

Published: 2013-01-22

BDU:2015-04307

Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2011-01-03

BDU:2015-05303

Уязвимости операционной системы openSUSE, позволяющие злоумышленнику нарушить доступность защищаемой информации

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05304

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05305

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05306

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05307

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05308

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05309

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05310

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05311

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05312

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05313

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05314

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05315

Severity: HIGH (7.8)

References:

Published: 1970-01-01

BDU:2015-05542

Уязвимости операционной системы openSUSE, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.2)

References:

Published: 1970-01-01

BDU:2015-05543

Severity: HIGH (7.2)

References:

Published: 2013-03-16
Modified: 2023-11-07

CVE-2012-6537

net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.

Severity: LOW (1.9)

References:

Published: 2013-03-16
Modified: 2023-11-07

CVE-2012-6542

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.

Severity: LOW (1.9)

References:

Published: 2013-03-16
Modified: 2023-11-07

CVE-2012-6545

The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.

Severity: LOW (1.9)

References:

Published: 2013-03-16
Modified: 2023-11-07

CVE-2012-6546

The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Severity: LOW (1.9)

References:

Published: 2013-03-16
Modified: 2023-11-07

CVE-2012-6547

The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Severity: LOW (1.9)

References:

Published: 2013-03-01
Modified: 2024-11-21

CVE-2013-0228

The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.

Severity: MEDIUM (6.2)

References:

Published: 2013-02-18
Modified: 2024-11-21

CVE-2013-0268

The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.

Severity: MEDIUM (6.2)

References:

Published: 2013-02-28
Modified: 2024-11-21

CVE-2013-0343

The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.

Severity: LOW (3.2)

References:

Published: 2013-02-28
Modified: 2024-11-21

CVE-2013-0349

The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.

Severity: LOW (1.9)

References:

Published: 2013-02-18
Modified: 2024-11-21

CVE-2013-0871

Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACE_SETREGS ptrace system call in a crafted application, as demonstrated by ptrace_death.

References:

Published: 2013-03-18
Modified: 2024-11-21

CVE-2013-0913

Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.

Severity: HIGH (7.2)

References:

Published: 2013-02-28
Modified: 2024-11-21

CVE-2013-1767

Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option.

Severity: MEDIUM (6.2)

References:

Published: 2013-02-28
Modified: 2024-11-21

CVE-2013-1773

Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.

Severity: MEDIUM (6.2)

References:

Published: 2013-02-28
Modified: 2024-11-21

CVE-2013-1774

The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter.

Severity: MEDIUM (4.0)

References:

Published: 2013-03-22
Modified: 2024-11-21

CVE-2013-1792

Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.

Severity: MEDIUM (4.7)

References:

Published: 2013-03-22
Modified: 2024-11-21

CVE-2013-1796

The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.

Severity: MEDIUM (6.8)

References:

Published: 2013-03-22
Modified: 2024-11-21

CVE-2013-1797

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.

Severity: MEDIUM (6.8)

References:

Published: 2013-03-22
Modified: 2024-11-21

CVE-2013-1798

The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.

Severity: MEDIUM (6.2)

References:

Published: 2013-03-22
Modified: 2024-11-21

CVE-2013-1826

The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.

Severity: MEDIUM (6.2)

References:

Published: 2013-03-22
Modified: 2024-11-21

CVE-2013-1827

net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for a certain (1) sender or (2) receiver getsockopt call.

Severity: MEDIUM (6.2)

References:

Published: 2013-04-29
Modified: 2024-11-21

CVE-2013-1928

The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.

Severity: MEDIUM (4.7)

References:

Published: 2013-06-07
Modified: 2024-11-21

CVE-2013-2141

The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.

Severity: LOW (2.1)

References:

Published: 2013-07-05
Modified: 2024-11-21

CVE-2013-2164

The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive.

Severity: LOW (2.1)

References:

Published: 2013-07-05
Modified: 2024-11-21

CVE-2013-2234

The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.

Severity: LOW (2.1)

References:

Published: 2013-06-07
Modified: 2024-11-21

CVE-2013-2851

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.

Severity: MEDIUM (6.0)

References:

Published: 2013-09-16
Modified: 2024-11-21

CVE-2013-2888

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.

Severity: MEDIUM (6.2)

References:

Published: 2013-09-16
Modified: 2024-11-21

CVE-2013-2889

drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

Severity: MEDIUM (4.7)

References:

Published: 2013-09-16
Modified: 2024-11-21

CVE-2013-2892

drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

Severity: MEDIUM (4.7)

References:

Published: 2013-12-09
Modified: 2024-11-21

CVE-2013-2929

The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h.

Severity: LOW (3.3)

References:

Published: 2013-04-22
Modified: 2024-11-21

CVE-2013-3231

The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.

Severity: MEDIUM (4.7)

References:

Published: 2013-07-29
Modified: 2024-11-21

CVE-2013-4162

The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.

Severity: MEDIUM (4.7)

References:

Published: 2013-10-24
Modified: 2024-11-21

CVE-2013-4299

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.

Severity: MEDIUM (6.0)

References:

Published: 2013-10-10
Modified: 2024-11-21

CVE-2013-4345

Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Severity: MEDIUM (5.8)

References:

Published: 2013-10-10
Modified: 2024-11-21

CVE-2013-4387

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

Severity: MEDIUM (6.1)

References:

Published: 2013-11-04
Modified: 2024-11-21

CVE-2013-4470

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.

References:

Published: 2013-11-20
Modified: 2024-11-21

CVE-2013-4588

Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability for (1) a getsockopt system call, related to the do_ip_vs_get_ctl function, or (2) a setsockopt system call, related to the do_ip_vs_set_ctl function.

Severity: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-6367

The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifications of the TMICT value.

Severity: MEDIUM (5.7)

References:

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-6368

The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.

Severity: MEDIUM (6.2)

References:

Published: 2014-01-06
Modified: 2023-11-07

CVE-2013-6405

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-7281. Reason: This candidate is a duplicate of CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, and CVE-2013-7281. Notes: All CVE users should reference CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, and/or CVE-2013-7281 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Package kernel-image-led-ws updated to version 3.4.84-alt0.M70P.1 for branch c7 in task 117041.

Published: 2014-01-15

BDU:2014-00065

Уязвимость операционной системы Linux, позволяющая злоумышленнику повысить свои привилегии

References:

CVE-2014-0038

Published: 2013-10-24

BDU:2014-00091

Severity: MEDIUM (6.0)

References:

CVE-2013-4299

Published: 2013-01-22

BDU:2015-04307

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2013-10-24
Modified: 2024-11-21

CVE-2013-4299

Severity: MEDIUM (6.0)

References:

Published: 2013-09-25
Modified: 2024-11-21

CVE-2013-4350

The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.

Severity: MEDIUM (5.0)

References:

Published: 2014-02-07
Modified: 2024-11-21

CVE-2014-0038

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.

References:

No data currently available.

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2523

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

Severity: CRITICAL (10.0)

References:

Package kernel-image-ovz-el updated to version 2.6.32-alt117 for branch c7 in task 117041.

Published: 2013-01-22

BDU:2015-04307

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2013-06-07
Modified: 2024-11-21

CVE-2013-2141

Severity: LOW (2.1)

References:

Published: 2013-11-04
Modified: 2024-11-21

CVE-2013-4470

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2523

Severity: CRITICAL (10.0)

References:

Package kernel-image-std-def updated to version 3.10.34-alt1 for branch c7 in task 117041.

Published: 2014-03-11

BDU:2014-00102

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: HIGH (7.1)

References:

CVE-2014-0101

Published: 2013-01-22

BDU:2015-04307

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2014-03-11
Modified: 2024-11-21

CVE-2014-0101

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

Severity: HIGH (7.8)

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2523

Severity: CRITICAL (10.0)

References:

Published: 2014-04-15
Modified: 2024-11-21

CVE-2014-2706

Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and tx.c.

Severity: HIGH (7.1)

References:

Package kernel-image-std-pae updated to version 3.10.34-alt1 for branch c7 in task 117041.

Published: 2013-01-22

BDU:2015-04307

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2523

Severity: CRITICAL (10.0)

References:

Package kernel-image-un-def updated to version 3.13.7-alt1 for branch c7 in task 117041.

Published: 2014-02-28

BDU:2014-00054

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании, повысить свои привилегии или выполнить произвольный код

Severity: MEDIUM (6.2)

References:

CVE-2014-0069

Published: 2014-03-11

BDU:2014-00055

Severity: HIGH (7.4)

References:

CVE-2014-0049

Published: 2014-01-15

BDU:2014-00065

Уязвимость операционной системы Linux, позволяющая злоумышленнику повысить свои привилегии

References:

CVE-2014-0038

Published: 2014-03-24

BDU:2014-00101

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: MEDIUM (4.7)

References:

CVE-2013-7339

Published: 2014-03-11

BDU:2014-00102

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: HIGH (7.1)

References:

CVE-2014-0101

Published: 2013-01-22

BDU:2015-04307

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2014-03-11

BDU:2015-05685

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05686

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05687

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05688

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05689

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05690

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05691

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05692

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05693

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05694

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05695

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05696

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05697

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05698

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05699

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05700

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05701

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05702

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05703

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05704

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05705

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05706

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05707

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05708

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05709

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05710

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05711

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05712

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05713

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05714

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05715

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05716

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05717

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05718

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05719

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05720

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05721

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05722

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05723

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05724

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05725

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05726

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05727

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05728

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05729

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05730

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05731

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05732

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05733

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05734

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05735

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05736

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05737

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05738

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05739

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05740

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05741

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05742

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05743

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05744

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05745

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05746

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05747

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05748

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05749

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05750

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05751

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05752

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05753

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05754

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05755

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05756

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05757

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05758

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05759

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05760

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05761

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05762

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05763

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05764

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05765

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05766

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05767

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05768

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05769

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05770

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05771

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05772

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05773

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05774

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05775

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05776

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05777

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05778

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05779

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05780

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05781

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05782

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05783

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05784

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05785

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05786

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05787

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05788

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05789

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05790

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05791

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05792

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05793

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05794

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05795

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05796

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05797

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05798

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05799

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05800

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05801

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05802

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05803

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05804

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05805

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05806

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05807

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05808

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05809

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05810

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05811

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05812

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05813

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05814

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05815

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05816

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05817

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05818

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05819

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05820

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05821

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05822

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05823

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05824

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05825

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05826

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05827

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05828

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05829

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05830

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05831

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05832

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05833

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05834

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05835

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05836

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05837

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05838

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05839

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05840

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05841

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05842

Severity: CRITICAL (9.3)

References:

Published: 1970-01-01

BDU:2015-05843

Severity: CRITICAL (9.3)

References:

Published: 2017-04-25

BDU:2017-01145

Уязвимость операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.9)

References:

CVE-2017-8106

Published: 2017-05-03

BDU:2017-01159

Уязвимость компонента kernel/events/core.c ядра операционной системы Android, позволяющая нарушителю повысить свои привилегии

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2013-7339

The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.

Severity: MEDIUM (4.7)

References:

Published: 2014-02-07
Modified: 2024-11-21

CVE-2014-0038

References:

Published: 2014-03-11
Modified: 2024-11-21

CVE-2014-0049

Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data.

Severity: HIGH (7.4)

References:

Published: 2014-02-28
Modified: 2024-11-21

CVE-2014-0069

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

Severity: HIGH (7.2)

References:

Published: 2014-03-11
Modified: 2024-11-21

CVE-2014-0101

Severity: HIGH (7.8)

References:

Published: 2014-03-11
Modified: 2024-11-21

CVE-2014-0102

The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.

Severity: MEDIUM (5.2)

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-0131

Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation.

Severity: LOW (2.9)

References:

Published: 2014-01-19
Modified: 2024-11-21

CVE-2014-1438

The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.

Severity: MEDIUM (4.7)

References:

Published: 2014-01-19
Modified: 2024-11-21

CVE-2014-1446

The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.

Severity: LOW (1.9)

References:

Published: 2014-02-28
Modified: 2024-11-21

CVE-2014-1690

The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.

Severity: LOW (2.6)

References:

Published: 2014-02-28
Modified: 2024-11-21

CVE-2014-1874

The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.

Severity: MEDIUM (4.9)

References:

Published: 2014-02-28
Modified: 2024-11-21

CVE-2014-2038

The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by writing to a file in an NFS filesystem and then reading the same file.

Severity: LOW (2.1)

References:

Published: 2014-02-28
Modified: 2024-11-21

CVE-2014-2039

arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by executing a crafted instruction.

Severity: MEDIUM (4.9)

References:

Published: 2014-03-11
Modified: 2024-11-21

CVE-2014-2309

The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.

Severity: MEDIUM (6.1)

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2523

Severity: CRITICAL (10.0)

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2568

Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.

Severity: LOW (2.9)

References:

Published: 2014-04-01
Modified: 2024-11-21

CVE-2014-2672

Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large amount of network traffic that triggers certain list deletions.

Severity: HIGH (7.1)

References:

Published: 2014-04-01
Modified: 2024-11-21

CVE-2014-2673

The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service (Program Check and system crash) via certain instructions that are executed with the processor in the Transactional state.

Severity: MEDIUM (4.7)

References:

Published: 2014-04-15
Modified: 2024-11-21

CVE-2014-2706

Severity: HIGH (7.1)

References:

Published: 2015-03-16
Modified: 2024-11-21

CVE-2014-8172

The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service (soft lockup or system crash) via unspecified use of Asynchronous I/O (AIO) operations.

Severity: MEDIUM (4.9)

References:

Published: 2015-03-16
Modified: 2024-11-21

CVE-2014-8173

The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not properly determine whether a Page Middle Directory (PMD) entry is a transparent huge-table entry, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted MADV_WILLNEED madvise system call that leverages the absence of a page-table lock.

Severity: HIGH (7.2)

References:

Published: 2014-11-10
Modified: 2024-11-21

CVE-2014-8709

The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets.

Severity: MEDIUM (5.0)

References:

Published: 2016-10-17
Modified: 2024-11-21

CVE-2015-3288

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2016-05-02
Modified: 2024-11-21

CVE-2015-4170

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread.

Severity: MEDIUM (4.7) Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Published: 2017-05-03
Modified: 2024-11-21

CVE-2015-9004

kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2017-04-25
Modified: 2024-11-21

CVE-2017-8106

The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer.

Severity: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

Package kernel-src-kvm updated to version 3.10.21-alt6 for branch c7 in task 117041.

Published: 2014-03-11

BDU:2014-00055

Severity: HIGH (7.4)

References:

CVE-2014-0049

Published: 2013-12-14

BDU:2014-00094

Уязвимость операционной системы Linux, позволяющая злоумышленнику повысить свои привилегии

Severity: HIGH (7.2)

References:

CVE-2013-4587

Published: 2013-12-14

BDU:2014-00095

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: MEDIUM (5.7)

References:

CVE-2013-6367

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-4587

Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.

Severity: HIGH (7.2)

References:

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-6367

Severity: MEDIUM (5.7)

References:

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-6368

Severity: MEDIUM (6.2)

References:

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-6376

The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (host OS crash) via a crafted ICR write operation in x2apic mode.

Severity: MEDIUM (5.2)

References:

Published: 2014-03-11
Modified: 2024-11-21

CVE-2014-0049

Severity: HIGH (7.4)

References:

Package nvidia_glx_common updated to version 331.49-alt133 for branch c7 in task 117041.

Устанавливает Driver "nvidia" в случае Optimus'а

Package thunderbird updated to version 24.3.0-alt0.M70P.1 for branch c7 in task 117167.

Published: 2014-02-06

BDU:2014-00234

Уязвимость браузера Firefox, позволяющая злоумышленнику получить доступ к аутентификационным данным

Severity: MEDIUM (5.0)

References:

CVE-2014-1487

Published: 2014-02-06

BDU:2014-00235

Уязвимость браузера Firefox ESR, позволяющая злоумышленнику получить доступ к аутентификационным данным

Severity: MEDIUM (5.0)

References:

CVE-2014-1487

Published: 2014-02-06

BDU:2014-00236

Уязвимость почтового клиента Thunderbird, позволяющая злоумышленнику получить доступ к аутентификационным данным

Severity: MEDIUM (5.0)

References:

CVE-2014-1487

Published: 2014-02-06

BDU:2014-00237

Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику получить доступ к аутентификационным данным

Severity: MEDIUM (5.0)

References:

CVE-2014-1487

Published: 2014-02-06

BDU:2014-00257

Уязвимость браузера Firefox, позволяющая злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1477

Published: 2014-02-06

BDU:2014-00258

Уязвимость браузера Firefox ESR, позволяющая злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1477

Published: 2014-02-06

BDU:2014-00259

Уязвимость почтового клиента Thunderbird позволяющая злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1477

Published: 2014-02-06

BDU:2014-00260

Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1477

Published: 2014-02-06

BDU:2014-00265

Severity: CRITICAL (10.0)

References:

CVE-2014-1486

Published: 2014-02-06

BDU:2014-00266

Severity: CRITICAL (10.0)

References:

CVE-2014-1486

Published: 2014-02-06

BDU:2014-00267

Уязвимость почтового клиента Thunderbird, позволяющая злоумышленнику выполнить произвольный код или вызвать отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1486

Published: 2014-06-02

BDU:2014-00268

Severity: CRITICAL (10.0)

References:

CVE-2014-1486

Published: 2014-02-06

BDU:2014-00286

Уязвимость браузера Firefox, позволяющая злоумышленнику обойти ограничения на оконные объекты

Severity: MEDIUM (5.0)

References:

CVE-2014-1481

Published: 2014-02-06

BDU:2014-00287

Уязвимость браузера Firefox ESR, позволяющая злоумышленнику обойти ограничения на оконные объекты

Severity: MEDIUM (5.0)

References:

CVE-2014-1481

Published: 2014-02-06

BDU:2014-00288

Уязвимость почтового клиента Thunderbird, позволяющая злоумышленнику обойти ограничения на оконные объекты

Severity: MEDIUM (5.0)

References:

CVE-2014-1481

Published: 2014-02-06

BDU:2014-00289

Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику обойти ограничения на оконные объекты

Severity: MEDIUM (5.0)

References:

CVE-2014-1481

Published: 2014-02-06

BDU:2014-00294

Уязвимость браузера Firefox, позволяющая злоумышленнику обойти ограничения

Severity: MEDIUM (5.0)

References:

CVE-2014-1479

Published: 2014-02-06

BDU:2014-00295

Уязвимость браузера Firefox ESR, позволяющая злоумышленнику обойти ограничения

Severity: MEDIUM (5.0)

References:

CVE-2014-1479

Published: 2014-02-06

BDU:2014-00296

Уязвимость почтового клиента Thunderbird, позволяющая злоумышленнику обойти ограничения

Severity: MEDIUM (5.0)

References:

CVE-2014-1479

Published: 2014-02-06

BDU:2014-00297

Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику обойти ограничения

Severity: MEDIUM (5.0)

References:

CVE-2014-1479

Published: 2014-02-06

BDU:2014-00298

Уязвимость браузера Firefox, позволяющая злоумышленнику выполнить произвольный код или выполнить отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1482

Published: 2014-02-06

BDU:2014-00299

Уязвимость браузера Firefox ESR, позволяющая злоумышленнику выполнить произвольный код или выполнить отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1482

Published: 2014-02-06

BDU:2014-00300

Уязвимость почтового клиента Thunderbird, позволяющая злоумышленнику выполнить произвольный код или выполнить отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1482

Published: 2014-02-06

BDU:2014-00301

Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику выполнить произвольный код или выполнить отказ в обслуживании

Severity: CRITICAL (10.0)

References:

CVE-2014-1482

Published: 2013-12-09

BDU:2015-06136

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (5.0)

References:

Published: 2013-12-09

BDU:2015-06137

Severity: MEDIUM (5.3) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References:

Published: 2013-12-09

BDU:2015-06138

Severity: MEDIUM (5.0)

References:

Published: 2013-12-09

BDU:2015-06139

Множественные уязвимости пакета libjpeg-turbo-static-1.2.1 операционной системы Red Hat Enterprise Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (5.3) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References:

Published: 2013-12-09

BDU:2015-07110

Уязвимость операционной системы Red Hat Enterprise Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (5.0)

References:

Published: 2013-12-09

BDU:2015-07111

Severity: MEDIUM (5.0)

References:

Published: 2013-12-09

BDU:2015-07112

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09076

Уязвимость операционной системы CentOS, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09077

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09078

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09079

Уязвимости операционной системы CentOS, позволяющие удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09080

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09081

Severity: MEDIUM (5.0)

References:

Published: 2013-12-10

BDU:2015-09082

Severity: MEDIUM (5.0)

References:

Published: 2013-03-16
Modified: 2024-11-21

CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

Severity: MEDIUM (5.9) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-5609

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-5613

Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-5615

The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-5616

Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-5618

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-11-19
Modified: 2024-11-21

CVE-2013-6629

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

Severity: MEDIUM (5.0)

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-6671

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2013-12-11
Modified: 2024-11-21

CVE-2013-6673

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.

Severity: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

References: