Vulnerabilities (CVE)

Filtered by vendor Linux Subscribe
Total 7070 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1393 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).
CVE-1999-0720 1 Linux 1 Linux Kernel 2024-02-28 4.6 MEDIUM N/A
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
CVE-1999-1339 2 Freebsd, Linux 2 Freebsd, Linux Kernel 2024-02-28 5.0 MEDIUM N/A
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
CVE-2003-1332 2 Linux, Samba 2 Linux Kernel, Samba 2024-02-28 7.5 HIGH N/A
Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201.
CVE-2002-1319 2 Linux, Trustix 2 Linux Kernel, Secure Linux 2024-02-28 2.1 LOW N/A
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
CVE-2001-1398 1 Linux 1 Linux Kernel 2024-02-28 7.5 HIGH N/A
Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.
CVE-1999-0656 1 Linux 1 Linux Kernel 2024-02-28 5.0 MEDIUM N/A
The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
CVE-2003-0643 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
CVE-1999-1441 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it.
CVE-1999-0781 3 Freebsd, Kde, Linux 3 Freebsd, Kde, Linux Kernel 2024-02-28 7.2 HIGH N/A
KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.
CVE-2003-0465 1 Linux 1 Linux Kernel 2024-02-28 5.0 MEDIUM N/A
The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.
CVE-2004-1017 1 Linux 1 Linux Kernel 2024-02-28 10.0 HIGH N/A
Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.
CVE-2003-0961 1 Linux 1 Linux Kernel 2024-02-28 7.2 HIGH N/A
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
CVE-2002-1963 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.
CVE-2003-1454 4 Invision Power Services, Linux, Microsoft and 1 more 4 Invision Board, Linux Kernel, All Windows and 1 more 2024-02-28 5.0 MEDIUM N/A
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.
CVE-2004-0394 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
CVE-2004-0186 2 Linux, Samba 2 Linux Kernel, Samba 2024-02-28 7.2 HIGH N/A
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
CVE-2003-0187 1 Linux 1 Linux Kernel 2024-02-28 5.0 MEDIUM N/A
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.
CVE-2000-0227 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets.
CVE-2003-1040 1 Linux 1 Linux Kernel 2024-02-28 2.1 LOW N/A
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.