7.1 - USN-263-1

Executive Summary

Summary
Title	Linux kernel vulnerabilities

Informations
Name	USN-263-1	First vendor Publication	2006-03-13
Vendor	Ubuntu	Last vendor Modification	2006-03-13
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:C/I:N/A:C)
Cvss Base Score	7.1	Attack Range	Network
Cvss Impact Score	9.2	Attack Complexity	High
Cvss Expoit Score	4.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) Ubuntu 5.10 (Breezy Badger)

The following packages are affected:

linux-image-2.6.10-6-386 linux-image-2.6.10-6-686 linux-image-2.6.10-6-686-smp linux-image-2.6.10-6-amd64-generic linux-image-2.6.10-6-amd64-k8 linux-image-2.6.10-6-amd64-k8-smp linux-image-2.6.10-6-amd64-xeon linux-image-2.6.10-6-itanium linux-image-2.6.10-6-itanium-smp linux-image-2.6.10-6-k7 linux-image-2.6.10-6-k7-smp linux-image-2.6.10-6-mckinley linux-image-2.6.10-6-mckinley-smp linux-image-2.6.10-6-power3 linux-image-2.6.10-6-power3-smp linux-image-2.6.10-6-power4 linux-image-2.6.10-6-power4-smp linux-image-2.6.10-6-powerpc linux-image-2.6.10-6-powerpc-smp linux-image-2.6.12-10-386 linux-image-2.6.12-10-686 linux-image-2.6.12-10-686-smp linux-image-2.6.12-10-amd64-generic linux-image-2.6.12-10-amd64-k8 linux-image-2.6.12-10-amd64-k8-smp linux-image-2.6.12-10-amd64-xeon linux-image-2.6.12-10-iseries-smp linux-image-2.6.12-10-itanium linux-image-2.6.12-10-itanium-smp linux-image-2.6.12-10-k7 linux-image-2.6.12-10-k7-smp linux-image-2.6.12-10-mckinley linux-image-2.6.12-10-mckinley-smp linux-image-2.6.12-10-powerpc linux-image-2.6.12-10-powerpc-smp linux-image-2.6.12-10-powerpc64-smp linux-image-2.6.8.1-6-386 linux-image-2.6.8.1-6-686 linux-image-2.6.8.1-6-686-smp linux-image-2.6.8.1-6-amd64-generic linux-image-2.6.8.1-6-amd64-k8 linux-image-2.6.8.1-6-amd64-k8-smp linux-image-2.6.8.1-6-amd64-xeon linux-image-2.6.8.1-6-k7 linux-image-2.6.8.1-6-k7-smp linux-image-2.6.8.1-6-power3 linux-image-2.6.8.1-6-power3-smp linux-image-2.6.8.1-6-power4 linux-image-2.6.8.1-6-power4-smp linux-image-2.6.8.1-6-powerpc linux-image-2.6.8.1-6-powerpc-smp linux-patch-debian-2.6.8.1 linux-patch-ubuntu-2.6.10 linux-patch-ubuntu-2.6.12

The problem can be corrected by upgrading the affected package to version 2.6.8.1-16.28 (for Ubuntu 4.10), 2.6.10-34.12 (for Ubuntu 5.04), or 2.6.12-10.30 (for Ubuntu 5.10). After a standard system upgrade you need to reboot your machine to effect the necessary changes.

Details follow:

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. (CVE-2005-3359)

David Howells noticed a race condition in the add_key(), request_key() and keyctl() functions. By modifying the length of string arguments after the kernel determined their length, but before the kernel copied them into kernel memory, a local attacker could either crash the kernel or read random parts of kernel memory (which could potentially contain sensitive data). (CVE-2006-0457)

An information disclosure vulnerability was discovered in the ftruncate() function for the XFS file system. Under certain conditions, this function could expose random unallocated blocks. A local user could potentially exploit this to recover sensitive data from previously deleted files. (CVE-2006-0554)

A local Denial of Service vulnerability was found in the NFS client module. By opening a file on an NFS share with O_DIRECT and performing some special operations on it, a local attacker could trigger a kernel crash. (CVE-2006-0555)

The ELF binary loader did not sufficiently verify some addresses in the ELF headers. By attempting to execute a specially crafted program, a local attacker could exploit this to trigger a recursive loop of kernel errors, which finally ended in a kernel crash. This only affects the amd64 architecture on Intel processors (EMT64). (CVE-2006-0741)

The die_if_kernel() function was incorrectly declared as "does never return" on the ia64 platform. A local attacker could exploit this to crash the kernel. Please note that ia64 is not an officially supported platform. (CVE-2006-0742)

Oleg Nesterov discovered a race condition in the signal handling. On multiprocessor (SMP) machines, a local attacker could exploit this to create many unkillable processes, which could eventually lead to a Denial of Service.

A memory leak was discovered in the handling of files which were opened with the O_DIRECT flag. By repeatedly opening files in a special way, a local attacker could eventually drain all available kernel memory and render the machine unusable. This flaw only affects Ubuntu 4.10. (http://linux.bkbits.net:8080/linux-2.6/cset%404182a613oVsK0-8eCWpyYFrUf8rhLA)

Original Source

Url : http://www.ubuntu.com/usn/USN-263-1

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10214

Oval ID:	oval:org.mitre.oval:def:10214
Title:	The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.
Description:	The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-3359	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL AND kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel is earlier than 0:2.6.9-34.0.1.EL AND kernel-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-doc is earlier than 0:2.6.9-34.0.1.EL AND kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL AND kernel-smp is earlier than 0:2.6.9-34.0.1.EL

Definition Id: oval:org.mitre.oval:def:10518

Oval ID:	oval:org.mitre.oval:def:10518
Title:	Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors related to a "bad elf entry address."
Description:	Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors related to a "bad elf entry address."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-0741	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-47.EL AND kernel-unsupported is earlier than 0:2.4.21-47.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-47.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL AND kernel-hugemem is earlier than 0:2.4.21-47.EL AND kernel is earlier than 0:2.4.21-47.EL AND kernel-source is earlier than 0:2.4.21-47.EL AND kernel-doc is earlier than 0:2.4.21-47.EL AND kernel-smp is earlier than 0:2.4.21-47.EL OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL AND kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel is earlier than 0:2.6.9-34.0.1.EL AND kernel-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-doc is earlier than 0:2.6.9-34.0.1.EL AND kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL AND kernel-smp is earlier than 0:2.6.9-34.0.1.EL

Definition Id: oval:org.mitre.oval:def:10742

Oval ID:	oval:org.mitre.oval:def:10742
Title:	The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems.
Description:	The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-0742	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-47.EL AND kernel-unsupported is earlier than 0:2.4.21-47.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-47.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL AND kernel-hugemem is earlier than 0:2.4.21-47.EL AND kernel is earlier than 0:2.4.21-47.EL AND kernel-source is earlier than 0:2.4.21-47.EL AND kernel-doc is earlier than 0:2.4.21-47.EL AND kernel-smp is earlier than 0:2.4.21-47.EL OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-42.EL AND kernel-hugemem-devel is earlier than 0:2.6.9-42.EL AND kernel-smp-devel is earlier than 0:2.6.9-42.EL AND kernel-largesmp-devel is earlier than 0:2.6.9-42.EL AND kernel is earlier than 0:2.6.9-42.EL AND kernel-devel is earlier than 0:2.6.9-42.EL AND kernel-doc is earlier than 0:2.6.9-42.EL AND kernel-largesmp is earlier than 0:2.6.9-42.EL AND kernel-smp is earlier than 0:2.6.9-42.EL

Definition Id: oval:org.mitre.oval:def:9566

Oval ID:	oval:org.mitre.oval:def:9566
Title:	Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
Description:	Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-0457	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-42.EL AND kernel-hugemem-devel is earlier than 0:2.6.9-42.EL AND kernel-smp-devel is earlier than 0:2.6.9-42.EL AND kernel-largesmp-devel is earlier than 0:2.6.9-42.EL AND kernel is earlier than 0:2.6.9-42.EL AND kernel-devel is earlier than 0:2.6.9-42.EL AND kernel-doc is earlier than 0:2.6.9-42.EL AND kernel-largesmp is earlier than 0:2.6.9-42.EL AND kernel-smp is earlier than 0:2.6.9-42.EL

Definition Id: oval:org.mitre.oval:def:9932

Oval ID:	oval:org.mitre.oval:def:9932
Title:	The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).
Description:	The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2006-0555	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL AND kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel is earlier than 0:2.6.9-34.0.1.EL AND kernel-devel is earlier than 0:2.6.9-34.0.1.EL AND kernel-doc is earlier than 0:2.6.9-34.0.1.EL AND kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL AND kernel-smp is earlier than 0:2.6.9-34.0.1.EL

CPE : Common Platform Enumeration

Type	Description	Count
Os	Linux Linux Kernel cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:::::::* cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::power4::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::amd64_k8::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::686::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::powerpc::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::amd64::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::power3_smp::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::k7::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::amd64_k8_smp::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::686_smp::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::amd64_xeon::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::k7_smp::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::386::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::powerpc_smp::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::power4_smp::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1.5::power3::::: cpe:2.3:o:linux:linux_kernel:2.6.8.1:::::::* cpe:2.3:o:linux:linux_kernel:2.6.8:::::::* cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.7:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.6:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.5:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.4:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.3:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.2:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.15.5:::::::* cpe:2.3:o:linux:linux_kernel:2.6.15.4:::::::* cpe:2.3:o:linux:linux_kernel:2.6.15.3:::::::* cpe:2.3:o:linux:linux_kernel:2.6.15.2:::::::* cpe:2.3:o:linux:linux_kernel:2.6.15.1:::::::* cpe:2.3:o:linux:linux_kernel:2.6.15:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.15:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.15:rc5:::::: cpe:2.3:o:linux:linux_kernel:2.6.15:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.15:rc7:::::: cpe:2.3:o:linux:linux_kernel:2.6.15:rc6:::::: cpe:2.3:o:linux:linux_kernel:2.6.14.4:::::::* cpe:2.3:o:linux:linux_kernel:2.6.14.3:::::::* cpe:2.3:o:linux:linux_kernel:2.6.14.2:::::::* cpe:2.3:o:linux:linux_kernel:2.6.14.1:::::::* cpe:2.3:o:linux:linux_kernel:2.6.14:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.13.4:::::::* cpe:2.3:o:linux:linux_kernel:2.6.13.3:::::::* cpe:2.3:o:linux:linux_kernel:2.6.13.2:::::::* cpe:2.3:o:linux:linux_kernel:2.6.13.1:::::::* cpe:2.3:o:linux:linux_kernel:2.6.13:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.13:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.13:rc7:::::: cpe:2.3:o:linux:linux_kernel:2.6.13:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.13:rc6:::::: cpe:2.3:o:linux:linux_kernel:2.6.12.6:::::::* cpe:2.3:o:linux:linux_kernel:2.6.12.5:::::::* cpe:2.3:o:linux:linux_kernel:2.6.12.4:::::::* cpe:2.3:o:linux:linux_kernel:2.6.12.3:::::::* cpe:2.3:o:linux:linux_kernel:2.6.12.2:::::::* cpe:2.3:o:linux:linux_kernel:2.6.12.1:::::::* cpe:2.3:o:linux:linux_kernel:2.6.12:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:::::: cpe:2.3:o:linux:linux_kernel:2.6.11.9:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.8:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.7:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.6:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.5:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.4:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.3:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.2:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.12:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.11:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.10:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11.1:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11_rc1_bk6:::::::* cpe:2.3:o:linux:linux_kernel:2.6.11:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.11:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.10:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.1:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test2:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test1:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test11:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test6:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test4:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test8:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test10:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test9:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test5:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test7:::::: cpe:2.3:o:linux:linux_kernel:2.6.0:test3:::::: cpe:2.3:o:linux:linux_kernel:2.6.0::64-bit_x86::::: cpe:2.3:o:linux:linux_kernel:2.6.0::itanium_ia64_montecito::::: cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:::::::*	108

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for kernel CESA-2010:0610 centos5 i386 File : nvt/gb_CESA-2010_0610_kernel_centos5_i386.nasl
2010-08-13	Name : RedHat Update for kernel RHSA-2010:0610-01 File : nvt/gb_RHSA-2010_0610-01_kernel.nasl
2008-01-17	Name : Debian Security Advisory DSA 1097-1 (kernel-source-2.4.27) File : nvt/deb_1097_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1103-1 (kernel-source-2.6.8) File : nvt/deb_1103_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
23894	Linux Kernel Multiple Function String Length Modification Race Condition Loca... The Linux Kernel contains a flaw that may allow a local denial of service. The issue is triggered when a race condition occurs that allows an attacker to modify an argument of a copy operation after is has been validated, but before it is used. This may present a window of opportunity for an attacker to gain access to sensitive information stored in memory.
23893	Linux Kernel atm Module Crafted Socket Operation Local DoS
23660	Linux Kernel die_if_kernel() Function Unspecified Return Issue The Linux kernel contains a flaw that may allow a local denial of service. The issue is triggered because the 'die_if_kernel()' function is labeled with the 'noreturn' attribute. On Intel ia64 systems, this can lead to a kernel panic when user faults are caused, which will result in loss of availability for the platform.
23607	Linux Kernel binfmt_elf.c Malformed elf Entry Address Local DoS The Linux kernel contains a flaw that may allow a local denial of service. The issue is triggered because the code in binfmt_elf.c fails to properly validate the entry address of ELF executables. With a crafted ELF binary, the kernel can be forced to enter an inifite loop, which will result in loss of availability for the platform. Note that the issue is only present on non-AMD x86_64 systems.
23606	Linux Kernel XFS ftruncate() Function Local Information Disclosure
23605	Linux Kernel Direct I/O NFS Client Local DoS

Nessus® Vulnerability Scanner

Date	Description
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1097.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1103.nasl - Type : ACT_GATHER_INFO
2006-08-30	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2006-0575.nasl - Type : ACT_GATHER_INFO
2006-08-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2006-0575.nasl - Type : ACT_GATHER_INFO
2006-08-04	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2006-0437.nasl - Type : ACT_GATHER_INFO
2006-07-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2006-0437.nasl - Type : ACT_GATHER_INFO
2006-07-05	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2006-0493.nasl - Type : ACT_GATHER_INFO
2006-05-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2006-0493.nasl - Type : ACT_GATHER_INFO
2006-03-23	Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2006-059.nasl - Type : ACT_GATHER_INFO
2006-03-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-263-1.nasl - Type : ACT_GATHER_INFO
2006-03-06	Name : The remote Fedora Core host is missing a security update. File : fedora_2006-131.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 12:03:21	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	5
CPE ID(s)	108
osvdb(s)	6
Openvas Exploit(s)	4
Nessus® Exploit(s)	11

	Related
7.1	CVE-2006-0457
4.9	CVE-2005-3359
4.6	CVE-2006-0742
2.1	CVE-2006-0555
1.7	CVE-2006-0554
1.2	CVE-2006-0741
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)

7.1 - USN-263-1

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU