Linux Enterprise Real Time Extension (Suse) - vulnerabilities (CVEs)

57 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2018-01-03. Vendor: Suse.

CVEs of Linux Enterprise Real Time Extension

CVE-2017-18017 - CVSS 9.8 (critical), 2018-01-03: The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a…
CVE-2016-5244 - CVSS 7.5 (high), 2016-06-27: The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote…
CVE-2016-2782 - CVSS 4.6 (medium), 2016-04-27: The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL…
CVE-2015-8551 - CVSS 6 (medium), 2016-04-13: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to…
CVE-2015-8785 - CVSS 6.2 (medium), 2016-02-08: The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a…
CVE-2015-8539 - CVSS 7.8 (high), 2016-02-08: The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that…
CVE-2015-0272 - CVSS 5 (medium), 2015-11-17: GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement…
CVE-2014-8160 - CVSS 5 (medium), 2015-03-02: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets…
CVE-2014-9585 - CVSS 2.1 (low), 2015-01-09: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it…
CVE-2014-9584 - CVSS 2.1 (low), 2015-01-09: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference…
CVE-2014-8559 - CVSS 5.5 (medium), 2014-11-10: The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to…
CVE-2014-8369 - CVSS 7.8 (high), 2014-11-10: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping…
CVE-2014-3690 - CVSS 5.5 (medium), 2014-11-10: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register…
CVE-2014-3687 - CVSS 7.5 (high), 2014-11-10: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…
CVE-2014-3601 - CVSS 4.3 (medium), 2014-09-01: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping…
CVE-2014-5077 - CVSS 7.1 (high), 2014-08-01: The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to…
CVE-2014-4667 - CVSS 5 (medium), 2014-07-03: The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows…
CVE-2014-4608 - CVSS 7.3 (high), 2014-07-03: Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2…
CVE-2014-4027 - CVSS 2.3 (low), 2014-06-23: The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure,…
CVE-2014-3153 - CVSS 7.8 (high), 2014-06-07: The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows…
CVE-2014-1738 - CVSS 2.1 (low), 2014-05-11: The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during…
CVE-2014-1737 - CVSS 7.2 (high), 2014-05-11: The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an…
CVE-2014-0181 - CVSS 2.1 (low), 2014-04-27: The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket,…
CVE-2010-4162 - CVSS 4.7 (medium), 2011-01-03: Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device…
CVE-2010-3876 - CVSS 1.9 (low), 2011-01-03: net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain…
CVE-2010-4164 - CVSS 7.8 (high), 2011-01-03: Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to…
CVE-2010-4163 - CVSS 4.7 (medium), 2011-01-03: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a…
CVE-2010-4258 - CVSS 6.2 (medium), 2010-12-30: The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to…
CVE-2010-3848 - CVSS 6.9 (medium), 2010-12-30: Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is…
CVE-2010-4158 - CVSS 2.1 (low), 2010-12-30: The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized…
CVE-2010-3850 - CVSS 2.1 (low), 2010-12-30: The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local…
CVE-2010-3849 - CVSS 4.7 (medium), 2010-12-30: The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a…
CVE-2010-3874 - CVSS 4 (medium), 2010-12-29: Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the…
CVE-2010-4347 - CVSS 6.9 (medium), 2010-12-22: The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges…
CVE-2010-4157 - CVSS 6.2 (medium), 2010-12-10: Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a…
CVE-2010-3861 - CVSS 2.1 (low), 2010-12-10: The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local…
CVE-2010-3904 - CVSS 7.8 (high), 2010-12-06: The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not…
CVE-2010-4082 - CVSS 1.9 (low), 2010-11-30: The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure…
CVE-2010-4081 - CVSS 1.9 (low), 2010-11-30: The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows…
CVE-2010-4080 - CVSS 2.1 (low), 2010-11-30: The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows…
CVE-2010-4083 - CVSS 1.9 (low), 2010-11-30: The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain…
CVE-2010-4078 - CVSS 1.9 (low), 2010-11-29: The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which…
CVE-2010-4073 - CVSS 1.9 (low), 2010-11-29: The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive…
CVE-2010-4072 - CVSS 1.9 (low), 2010-11-29: The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain…
CVE-2010-2962 - CVSS 7.2 (high), 2010-11-26: drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux…
CVE-2010-4169 - CVSS 4.9 (medium), 2010-11-22: Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an…
CVE-2010-4165 - CVSS 4.9 (medium), 2010-11-22: The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows…
CVE-2010-3432 - CVSS 7.8 (high), 2010-11-22: The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which…
CVE-2010-3442 - CVSS 4.7 (medium), 2010-10-04: Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause…
CVE-2010-3437 - CVSS 6.6 (medium), 2010-10-04: Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain…
CVE-2010-3297 - CVSS 2.1 (low), 2010-09-30: The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows…
CVE-2010-3296 - CVSS 2.1 (low), 2010-09-30: The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure…
CVE-2010-3298 - CVSS 2.1 (low), 2010-09-30: The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which…
CVE-2010-3301 - CVSS 7.2 (high), 2010-09-22: The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero…
CVE-2010-3080 - CVSS 7.2 (high), 2010-09-21: Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users…
CVE-2010-3067 - CVSS 4.9 (medium), 2010-09-21: Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service…
CVE-2010-2955 - CVSS 2.1 (low), 2010-09-08: The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain…
CVE-2007-6206 - CVSS 2.1 (low), 2007-12-04: The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump…