CVE & Exploit Intelligence Database

CVE-2001-1393 EPSS 0.00

Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).

Apr 17, 2001

CVE-2001-1391 5.5 MEDIUM EPSS 0.00

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

CWE-193 Apr 17, 2001

CVE-2001-1394 EPSS 0.00

Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service.

Apr 17, 2001

CVE-2001-1273 EPSS 0.00

The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).

Feb 12, 2001

CVE-2000-0506 2 PoCs Analysis EPSS 0.04

The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."

Jun 09, 2000

CVE-1999-0590 EPSS 0.10

A system does not present an appropriate legal message or warning to a user who is accessing it.

Jun 01, 2000

CVE-2000-0344 EPSS 0.01

The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.

May 01, 2000

CVE-2000-0289 EPSS 0.01

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.

Mar 27, 2000

CVE-2000-0227 1 PoC Analysis EPSS 0.00

The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets.

Mar 23, 2000

CVE-1999-1339 EPSS 0.01

Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.

Dec 31, 1999

CVE-2000-0006 EPSS 0.00

strace allows local users to read arbitrary files via memory mapped file names.

Dec 25, 1999

CVE-1999-0986 1 PoC Analysis EPSS 0.02

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.

Dec 08, 1999

CVE-1999-0317 EPSS 0.00

Buffer overflow in Linux su command gives root access to local users.

Nov 25, 1999

CVE-1999-1341 EPSS 0.00

Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.

Oct 22, 1999

CVE-1999-1352 EPSS 0.00

mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.

Sep 28, 1999

CVE-1999-0720 1 PoC Analysis EPSS 0.00

The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.

Aug 23, 1999

CVE-1999-1018 1 PoC Analysis EPSS 0.03

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.

Jul 27, 1999

CVE-1999-1166 1 PoC Analysis EPSS 0.00

Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.

Jul 11, 1999

CVE-1999-0804 1 PoC Analysis EPSS 0.05

Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.

Jun 01, 1999

CVE-1999-0431 1 PoC Analysis EPSS 0.09

Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.

Mar 01, 1999