CVE-2009-4020
- EPSS 3.81%
- Veröffentlicht 04.12.2009 21:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
CVE-2009-4026
- EPSS 1.29%
- Veröffentlicht 02.12.2009 16:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."
CVE-2009-4027
- EPSS 1.14%
- Veröffentlicht 02.12.2009 16:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the abs...
CVE-2009-4031
- EPSS 2.23%
- Veröffentlicht 29.11.2009 13:07:32
- Zuletzt bearbeitet 09.04.2025 00:30:58
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to ...
CVE-2009-4021
- EPSS 0.06%
- Veröffentlicht 25.11.2009 16:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption a...
CVE-2009-3080
- EPSS 0.07%
- Veröffentlicht 20.11.2009 17:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.
CVE-2009-4005
- EPSS 0.05%
- Veröffentlicht 20.11.2009 02:30:01
- Zuletzt bearbeitet 09.04.2025 00:30:58
The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.
CVE-2009-4004
- EPSS 0.05%
- Veröffentlicht 20.11.2009 02:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X8...
CVE-2009-3939
- EPSS 0.04%
- Veröffentlicht 16.11.2009 19:30:01
- Zuletzt bearbeitet 09.04.2025 00:30:58
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
CVE-2009-3888
- EPSS 0.12%
- Veröffentlicht 16.11.2009 19:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.