CVE-2009-3080

kernel: gdth: Prevent negative offsets in ioctl

Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 4 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 13 more

CVE-2006-5158

NFS lockd deadlock

The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Enterprise Linux and 4 more

CVE-2009-1890

httpd: mod_proxy reverse proxy DoS (infinite loop)

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

CVSS 2.0 · 7.1 High EPSS 16.2% KEV · Not listed

Vendors

Apache Canonical Debian and 2 more

Products

Http Server Ubuntu Linux Debian Linux and 8 more

CVE-2006-5752

httpd mod_status XSS

Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CVSS 2.0 · 4.3 Medium EPSS 27.8% KEV · Not listed

Vendors

Apache Canonical Fedoraproject and 1 more

Products

Http Server Ubuntu Linux Fedora and 9 more

CVE-2008-4315

tog-pegasus: failed authentication attempts not logged via PAM

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed

Vendors

Openpegasus Redhat

Products

Openpegasus Wbem Enterprise Linux Enterprise Linux Desktop

CVE-2006-6235

security flaw

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed

Vendors

Gnu Gpg4win Redhat and 3 more

Products

Privacy Guard Gpg4win Enterprise Linux and 6 more

CVE-2008-4313

tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.

CVSS 2.0 · 6.0 Medium EPSS 1.4% KEV · Not listed

Vendors

Openpegasus Redhat

Products

Openpegasus Wbem Enterprise Linux Enterprise Linux Desktop

CVE-2009-0834

kernel: x86-64: syscall-audit: 32/64 syscall hole

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 3 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 12 more

CVE-2009-1891

httpd: possible temporary DoS (CPU consumption) in mod_deflate

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).

CVSS 2.0 · 7.1 High EPSS 17.1% KEV · Not listed

Vendors

Apache Canonical Debian and 2 more

Products

Http Server Ubuntu Linux Debian Linux and 9 more

CVE-2007-1007

security flaw

Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.

CVSS 2.0 · 10.0 Critical EPSS 7.1% KEV · Not listed

Vendors

Ekiga Redhat

Products

Ekiga Enterprise Linux Enterprise Linux Desktop

CVE-2008-3281

libxml2 denial of service

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed

Vendors

Apple Canonical Debian and 4 more

Products

Iphone Os Safari Ubuntu Linux and 9 more

CVE-2008-3272

kernel snd_seq_oss_synth_make_info leak

The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 6 more

CVE-2008-3825

pam_krb5 existing_ticket permission flaw

pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Enterprise Linux Desktop

CVE-2007-1351

Multiple font integer overflows (CVE-2007-1352)

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

CVSS 2.0 · 8.5 High EPSS 5.6% KEV · Not listed

Vendors

Mandrakesoft Openbsd Redhat and 4 more

Products

Mandrake Linux Mandrake Linux Corporate Server Mandrake Multi Network Firewall and 8 more

CVE-2008-2365

kernel: ptrace: Crash on PTRACE_{ATTACH,DETACH} race

Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Linux Desktop

CVE-2008-2364

httpd: mod_proxy_http DoS via excessive interim responses from the origin server

The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

CVSS 2.0 · 5.0 Medium EPSS 12.7% KEV · Not listed

Vendors

Apache Canonical Fedoraproject and 1 more

Products

Http Server Ubuntu Linux Fedora and 6 more

CVE-2008-2808

Firefox file location escaping flaw

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Mozilla Redhat Ubuntu

Products

Firefox Seamonkey Thunderbird and 7 more

CVE-2008-3844

security flaw

Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.

CVSS 2.0 · 9.3 Critical EPSS 2.7% KEV · Not listed

Vendors

Openbsd Redhat

Products

Openssh Enterprise Linux Enterprise Linux Desktop and 1 more

CVE-2009-2692

kernel: uninit op in SOCKOPS_WRAP() leads to privesc

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

CVSS 3.1 · 7.8 High EPSS 14.6% KEV · Not listed

Vendors

Debian Linux Redhat and 1 more

Products

Debian Linux Linux Kernel Enterprise Linux and 8 more

CVE-2008-0456

httpd: mod_negotiation CRLF injection via untrusted file names in directories with MultiViews enabled

CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by uploading a file with a multi-line name containing HTTP header sequences and a file extension, which leads to injection within a (1) "406 Not Acceptable" or (2) "300 Multiple Choices" HTTP response when the extension is omitted in a request for the file.

CVSS 2.0 · 2.6 Low EPSS 19.0% KEV · Not listed

Vendors

Apache Redhat

Products

Http Server Enterprise Linux Enterprise Linux Desktop and 2 more