Vulnerabilities (CVE)

Filtered by vendor Linux Subscribe
Total 10574 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0720 1 Linux 1 Linux Kernel 2025-04-03 4.6 MEDIUM N/A
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
CVE-1999-0460 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
CVE-2004-0424 3 Linux, Sgi, Slackware 3 Linux Kernel, Propack, Slackware Linux 2025-04-03 7.2 HIGH N/A
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
CVE-2000-0344 1 Linux 1 Linux Kernel 2025-04-03 5.0 MEDIUM N/A
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
CVE-2005-2098 1 Linux 1 Linux Kernel 2025-04-03 5.0 MEDIUM N/A
The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
CVE-2005-4635 1 Linux 1 Linux Kernel 2025-04-03 5.0 MEDIUM N/A
The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service (invalid memory reference) via malformed fib_lookup netlink messages.
CVE-2003-1332 2 Linux, Samba 2 Linux Kernel, Samba 2025-04-03 7.5 HIGH N/A
Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201.
CVE-2005-0532 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4, when running on 64-bit architectures, may allow local users to trigger a buffer overflow as a result of casting discrepancies between size_t and int data types.
CVE-2005-2800 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.
CVE-2005-0529 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.
CVE-2005-4639 1 Linux 1 Linux Kernel 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by "reading more than 8 bytes into an 8 byte long array".
CVE-2005-2617 1 Linux 1 Linux Kernel 2025-04-03 3.6 LOW N/A
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insert_vm_struct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers.
CVE-2006-0554 1 Linux 1 Linux Kernel 2025-04-03 1.7 LOW N/A
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data.
CVE-1999-1285 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
CVE-2005-3179 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.
CVE-2006-1624 1 Linux 1 Linux Kernel 2025-04-03 7.8 HIGH N/A
The default configuration of syslogd in the Linux sysklogd package does not enable the -x (disable name lookups) option, which allows remote attackers to cause a denial of service (traffic amplification) via messages with spoofed source IP addresses.
CVE-2004-0133 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.
CVE-2004-0075 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.
CVE-2001-1392 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers.
CVE-1999-0138 7 Apple, Digital, Freebsd and 4 more 9 A Ux, Osf 1, Freebsd and 6 more 2025-04-03 7.2 HIGH N/A
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.