Advertisement
Connecting kernel, userspace, and graphics - the plumbing of Linux
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
kernel: multiple vulnerabilities
| Package(s): | kernel | CVE #(s): | CVE-2008-2136 CVE-2008-2148 | |||||||||||||||||||||
| Created: | May 15, 2008 | Updated: | July 23, 2008 | |||||||||||||||||||||
| Description: | The kernel has several denial of service vulnerabilities. From the
secunia report:
1) An error exists in the implementation of the "sys_utimensat()" system call. This can be exploited to update the access or modification time of arbitrary files via specially crafted arguments passed to the affected system call. 2) A memory leak exists in the "ipip6_rcv()" function included in the IPv6 over IPv4 (SIP) tunneling driver. This can be exploited to potentially exhaust all available memory via specially crafted network packets. | |||||||||||||||||||||||
| Alerts: |
| |||||||||||||||||||||||
(Log in to post comments)