LE
Product
Linux Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
476
CVEs
20
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 64Medium 60Low 4
Watch
Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-3919 | – | Jan 7 | Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact… Affected: 10 |
| CVE-2011-4862 | – | Dec 25 | Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU… Affected: 9; 10; 10; 10; 11; 11 |
| CVE-2011-4517 | – | Dec 15 | The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a… Affected: 11; 11 |
| CVE-2011-4516 | – | Dec 15 | Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of… Affected: 11; 11 |
| CVE-2011-3439 | – | Nov 11 | FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a… Affected: 11; 11 |
| CVE-2011-3192 | – | Aug 29 | The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU… Affected: 10; 10; 10; 11; 11 |
| CVE-2011-1526 | – | Jul 11 | ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote… Affected: 10; 10; 10; 11; 11 |
| CVE-2011-0419 | – | May 16 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18,… Affected: 10 |
| CVE-2011-1163 | – | Apr 10 | The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to… Affected: 10 |
| CVE-2011-1083 | – | Apr 3 | The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of… Affected: 11; 11; 11; 11 |
| CVE-2011-0762 | – | Mar 2 | The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion)… Affected: 9; 10; 10; 11 |
| CVE-2010-4160 | – | Jan 7 | Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP… Affected: 9; 10; 11 |
| CVE-2010-3873 | – | Jan 3 | The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption… Affected: 9 |
| CVE-2010-3876 | – | Jan 3 | net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive… Affected: 9; 10 |
| CVE-2010-4162 | – | Jan 3 | Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI… Affected: 10; 11 |
| CVE-2010-4163 | – | Jan 3 | The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a… Affected: 11 |
| CVE-2010-4164 | – | Jan 3 | Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of… Affected: 9; 10; 11 |
| CVE-2010-3849 | – | Dec 30 | The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service… Affected: 9; 10 |
| CVE-2010-4342 | – | Dec 30 | The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL… Affected: 9 |
| CVE-2010-4258 | – | Dec 30 | The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok… Affected: 9; 10; 11 |
| CVE-2010-4158 | – | Dec 30 | The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1)… Affected: 9; 10; 11 |
| CVE-2010-3848 | – | Dec 30 | Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users… Affected: 9; 10 |
| CVE-2010-3850 | – | Dec 30 | The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended… Affected: 9; 10 |
| CVE-2010-3874 | – | Dec 29 | Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before… Affected: 11 |
| CVE-2010-3861 | – | Dec 10 | The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain… Affected: 11 |
| CVE-2010-4157 | – | Dec 10 | Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory… Affected: 9; 10; 11 |
| CVE-2010-4180 | – | Dec 6 | OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session… Affected: 9; 10; 10 |
| CVE-2010-4082 | – | Nov 30 | The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows… Affected: 11 |
| CVE-2010-4083 | – | Nov 30 | The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive… Affected: 9; 10; 11 |
| CVE-2010-4080 | – | Nov 30 | The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain… Affected: 10 |
| CVE-2010-4081 | – | Nov 30 | The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain… Affected: 9; 10 |
| CVE-2010-4078 | – | Nov 29 | The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to… Affected: 10 |
| CVE-2010-4072 | – | Nov 29 | The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially… Affected: 9; 10; 11 |
| CVE-2010-4073 | – | Nov 29 | The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel… Affected: 9; 10; 11 |
| CVE-2010-2962 | – | Nov 26 | drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.36… Affected: 11 |
| CVE-2010-2963 | – | Nov 26 | drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a… Affected: 11 |
| CVE-2010-4169 | – | Nov 20 | Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call Affected: 11 |
| CVE-2010-4165 | – | Nov 20 | The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a… Affected: 11 |
| CVE-2010-3702 | – | Nov 5 | The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows… Affected: 9; 10; 11; 11 |
| CVE-2010-3442 | – | Oct 4 | Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service… Affected: 9; 10 |
| CVE-2010-3437 | – | Oct 4 | Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive… Affected: 9; 10; 11 |
| CVE-2010-3298 | – | Sep 30 | The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to… Affected: 11 |
| CVE-2010-3297 | – | Sep 30 | The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to… Affected: 11; 11 |
| CVE-2010-3296 | – | Sep 30 | The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows… Affected: 11; 11 |
| CVE-2010-2478 | – | Sep 29 | Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or… Affected: 11 |
| CVE-2010-3080 | – | Sep 21 | Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of… Affected: 11 |
| CVE-2010-3067 | – | Sep 21 | Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have… Affected: 9; 10 |
| CVE-2010-2959 | – | Sep 8 | Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6,… Affected: 11 |
| CVE-2010-2955 | – | Sep 8 | The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which… Affected: 11 |
| CVE-2010-2803 | – | Sep 8 | The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x… Affected: 11 |