CVE-2004-0949
- EPSS 3.73%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or...
CVE-2004-1016
- EPSS 0.41%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a de...
CVE-2004-1056
- EPSS 3.36%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.
CVE-2004-1058
- EPSS 0.06%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
CVE-2004-1068
- EPSS 0.06%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
CVE-2004-1069
- EPSS 0.08%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.
CVE-2004-1070
- EPSS 0.07%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensit...
CVE-2004-1071
- EPSS 0.05%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
CVE-2004-1072
- EPSS 0.07%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows ...
CVE-2004-1073
- EPSS 0.33%
- Veröffentlicht 10.01.2005 05:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.