huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2002-2443: krb5: UDP ping-pong flaw in kpasswd
Component: krb5
Severity: Moderate
Public date: 2002-06-16T00:00:00+00:00

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.


Affected upstream versions: n/a
Fixed upstream versions: kfw-4.1-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: cf1a0c411b2668c57c41e9c4efd15ba17b6b322c
CVE-2005-1761: security flaw
Component: security flaw
Severity: Important
Public date: 2005-06-21T00:00:00+00:00

Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4ea78729b8dbfc400fe165a57b90a394a7275a54
CVE-2005-1767: security flaw
Component: security flaw
Severity: Important
Public date: 2005-06-30T00:00:00+00:00

traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).


Affected upstream versions: n/a
Upstream repository: https://kernel.org/git/linux/kernel/git/marcelo/linux-2.4.git
Upstream fix commit: 51e31546a2fc46cb978da2ee0330a6a68f07541e
CVE-2005-2456: security flaw
Component: security flaw
Severity: Important
Public date: 2005-07-25T00:00:00+00:00

Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: a4f1bac62564049ea4718c4624b0fadc9f597c84
CVE-2005-2555: security flaw
Component: security flaw
Severity: Important
Public date: 2005-08-06T00:00:00+00:00

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6fc0b4a7a73a81e74d0004732df358f4f9975be2
CVE-2005-2800: security flaw
Component: security flaw
Severity: Moderate
Public date: 2005-08-27T00:00:00+00:00

Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 729d70f5dfd663b44bca68a4479c96bde7e535d6
CVE-2005-2872: security flaw
Component: security flaw
Severity: Important
Public date: 2005-05-09T00:00:00+00:00

The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.12
Upstream repository: https://www.kernel.org/git/linux/kernel/git/chrisw/lsm-2.6.git
Upstream fix commit: bcfff0b471a60df350338bcd727fc9b8a6aa54b2
CVE-2005-3044: security flaw
Component: security flaw
Severity: Important
Public date: 2005-09-09T00:00:00+00:00

Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.14
Upstream repository: https://kernel.org/git/linux/kernel/git/aegl/linux-2.6.git
Upstream fix commit: 35311d6478077f7bfe35c1c653193e658bf32686
CVE-2005-3108: security flaw
Component: security flaw
Severity: Moderate
Public date: 2005-05-17T00:00:00+00:00

mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.12
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 93ef70a217637ade3f335303a112b22a134a1ec2
CVE-2005-3109: security flaw
Component: security flaw
Severity: Moderate
Public date: 2005-05-01T00:00:00+00:00

The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.12
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 945b092011c6af71a0107be96e119c8c08776f3f
CVE-2005-3181: security flaw
Component: security flaw
Severity: Important
Public date: 2005-10-07T00:00:00+00:00

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).


Affected upstream versions: n/a
Fixed upstream versions: v2.6.14
Upstream repository: https://kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 829841146878e082613a49581ae252c071057c23
CVE-2005-3274: security flaw
Component: security flaw
Severity: Important
Public date: 2005-06-28T00:00:00+00:00

Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.


Affected upstream versions: n/a
Upstream repository: https://www.kernel.org/git/linux/kernel/git/marcelo/linux-2.4.git
Upstream fix commit: e684f066dff5628bb61ad1912de6e8058b5b4c7d
CVE-2005-3276: security flaw
Component: security flaw
Severity: Low
Public date: 2005-07-27T00:00:00+00:00

The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 71ae18ec690953e9ba7107c7cc44589c2cc0d9f1
CVE-2005-3356: security flaw
Component: security flaw
Severity: Important
Public date: 2006-01-14T00:00:00+00:00

The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.16
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7c7dce9209161eb260cdf9e9172f72c3a02379e6
CVE-2005-3784: security flaw
Component: security flaw
Severity: Important
Public date: 2005-11-10T00:00:00+00:00

The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.15
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7ed0175a462c4c30f6df6fac1cccac058f997739
CVE-2005-3806: security flaw
Component: security flaw
Severity: Important
Public date: 2005-10-25T00:00:00+00:00

The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.14
Upstream repository: https://kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4ea6a8046bb49d43c950898f0cb4e1994ef6c89d
CVE-2005-3848: security flaw
Component: security flaw
Severity: Important
Public date: 2005-08-18T00:00:00+00:00

Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."


Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: cb94c62c252796f42bb83fe40960d12f3ea5a82a
CVE-2005-3857: security flaw
Component: security flaw
Severity: Moderate
Public date: 2005-11-13T00:00:00+00:00

The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.15
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7ed0175a462c4c30f6df6fac1cccac058f997739
CVE-2005-4605: security flaw
Component: security flaw
Severity: Important
Public date: 2005-12-23T00:00:00+00:00

The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.15
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 8b90db0df7187a01fb7177f1f812123138f562cf
CVE-2005-4798: security flaw
Component: security flaw
Severity: Moderate
Public date: 2005-09-25T00:00:00+00:00

Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.


Affected upstream versions: n/a
Upstream repository: https://www.kernel.org/git/linux/kernel/git/marcelo/linux-2.4.git
Upstream fix commit: 87e03738fc15dc3ea4acde3a5dcb5f84b6b6152b
CVE-2005-4881: kernel: netlink: fix numerous padding memleaks
Component: kernel
Severity: Moderate
Public date: 2005-06-28T00:00:00+00:00

The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.

Statement: This issue has been rated as having moderate security impact. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, and Red Hat Enterprise MRG. It affects Red Hat Enterprise Linux 3, and 4.

This issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed.

For further information about Errata Support Policy, visit: https://access.redhat.com/support/policy/updates/errata/

Affected upstream versions: n/a
Fixed upstream versions: v2.6.13
Upstream repository: https://git.kernel.org/linux/kernel/git/stable/linux-2.4.37.y.git
Upstream fix commit: 30e744716c4a6cc4e8ecaaddf68f20057c03dc8d
CVE-2005-4886: Fix ipv6 exthdr bug causing Oops
Component: Fix ipv6 exthdr bug causing Oops
Severity: Important
Public date: 2005-04-24T00:00:00+00:00

The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors associated with an incorrect call to the ipv6_skip_exthdr function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.12
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 0d3d077cd4f1154e63a9858e47fe3fb1ad0c03e5
CVE-2006-0038: security flaw
Component: security flaw
Severity: Low
Public date: 2006-03-21T00:00:00+00:00

Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.16
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ee4bb818ae35f68d1f848eae0a7b150a38eb4168
CVE-2006-0039: security flaw
Component: security flaw
Severity: Low
Public date: 2006-05-16T00:00:00+00:00

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2722971cbe831117686039d5c334f2c0f560be13
CVE-2006-0456: security flaw
Component: security flaw
Severity: Important
Public date: 2006-03-07T00:00:00+00:00

The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a denial of service via unknown vectors.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.16
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 331c46591414f7f92b1cec048009abe89892ee79
CVE-2006-0557: security flaw
Component: security flaw
Severity: Low
Public date: 2006-02-17T00:00:00+00:00

sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.16
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 636f13c174dd7c84a437d3c3e8fa66f03f7fda63
CVE-2006-10002: perl-xml-parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input
Component: perl-xml-parser
Severity: Moderate
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2026-03-19T11:03:46.888000+00:00

A flaw was found in XML::Parser for Perl. This vulnerability allows an attacker to cause a heap corruption, which can lead to a denial of service (DoS) by crashing the application. The issue occurs when the software processes specially crafted XML input, causing an internal buffer to overflow. This overflow can corrupt memory, leading to instability and application termination.


Affected upstream versions: <= 2.47
Fixed upstream versions: 2.48
Upstream repository: https://github.com/cpan-authors/XML-Parser
Upstream fix commit: 6b291f4d260fc124a6ec80382b87a918f372bc6b
CVE-2006-10003: perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files
Component: perl-xml-parser
Severity: Important
CWE: CWE-193 (Off-by-one Error)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-03-19T11:08:04.341000+00:00

A flaw was found in XML::Parser, a Perl module for parsing XML. This vulnerability, an off-by-one heap buffer overflow, occurs when processing an XML file with very deep element nesting. A remote attacker could exploit this by providing a specially crafted XML file, potentially leading to memory corruption.


Affected upstream versions: <= 2.47
Fixed upstream versions: 2.48
Upstream repository: https://github.com/cpan-authors/XML-Parser
Upstream fix commit: 3eb9cc95420fa0c3f76947c4708962546bf27cfd
CVE-2006-1342: security flaw
Component: security flaw
Severity: Low
Public date: 2006-03-04T00:00:00+00:00

net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.


Affected upstream versions: n/a
Upstream repository: https://www.kernel.org/git/linux/kernel/git/marcelo/linux-2.4.git
Upstream fix commit: 09d3b3dcfa80c9094f1748c1be064b9326c9ef2b
CVE-2006-1522: security flaw
Component: security flaw
Severity: Important
Public date: 2006-04-10T00:00:00+00:00

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c3a9d6541f84ac3ff566982d08389b87c1c36b4e
CVE-2006-1863: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-04-20T00:00:00+00:00

Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1864.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 296034f7de8bdf111984ce1630ac598a9c94a253
CVE-2006-2071: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-04-17T00:00:00+00:00

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment.  NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: b78b6af66a5fbaf17d7e6bfc32384df5e34408c8
CVE-2006-2271: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-05-08T00:00:00+00:00

The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://git.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 35d63edb1c807bc5317e49592260e84637bc432e
CVE-2006-2272: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-05-08T00:00:00+00:00

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://git.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 62b08083ec3dbfd7e533c8d230dd1d8191a6e813
CVE-2006-2274: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-05-09T00:00:00+00:00

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://git.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 672e7cca17ed6036a1756ed34cf20dbd72d5e5f6
CVE-2006-2275: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-05-09T00:00:00+00:00

Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://git.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5
CVE-2006-2444: security flaw
Component: security flaw
Severity: Moderate
Public date: 2006-05-20T00:00:00+00:00

The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.


Affected upstream versions: n/a
Upstream repository: https://www.kernel.org/git/linux/kernel/git/stable/linux-2.6.16.y.git
Upstream fix commit: 1db6b5a66e93ff125ab871d6b3f7363412cc87e8
CVE-2006-2448: security flaw
Component: security flaw
Severity: Important
Public date: 2006-06-09T00:00:00+00:00

Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).


Affected upstream versions: n/a
Fixed upstream versions: v2.6.17
Upstream repository: https://www.kernel.org/git/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7c85d1f9d358b24c5b05c3a2783a78423775a080