secure linux vulnerabilities and fixes

Recent CVEs affecting secure linux, with upgrade or downgrade steps. 52 tracked.

Also searched as: securelinux.

secure linux has 52 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 10. Most recent: 2007-02-13. Highest priority: CVE-2002-0083 (score 73/100).

• CVE-2000-0917 HIGH 10.0 DOWNGRADE MITIGATE Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitr
• CVE-2007-0910 HIGH 10.0 UPGRADE MITIGATE Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via
• CVE-2007-0909 HIGH 7.5 DOWNGRADE MITIGATE Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via
• CVE-2007-0907 MEDIUM 5.0 DOWNGRADE MITIGATE Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors inv
• CVE-2007-0906 HIGH 7.5 DOWNGRADE MITIGATE Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execut
• CVE-2007-0905 HIGH 7.5 DOWNGRADE MITIGATE PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in
• CVE-2005-1410 LOW 2.1 DOWNGRADE MITIGATE The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_ini
• CVE-2005-1267 MEDIUM 5.0 DOWNGRADE MITIGATE The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix
• CVE-2005-0384 MEDIUM 5.0 MITIGATE MITIGATE Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial
• CVE-2005-0001 MEDIUM 6.9 MITIGATE MITIGATE Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to
• CVE-2004-2546 MEDIUM 6.4 DOWNGRADE MITIGATE Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
• CVE-2004-2044 HIGH 7.5 DOWNGRADE DOWNGRADE PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle,
• CVE-2004-1304 HIGH 10.0 DOWNGRADE MITIGATE Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arb
• CVE-2004-1154 HIGH 10.0 DOWNGRADE MITIGATE Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated u
• CVE-2004-1065 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote atta
• CVE-2004-1051 HIGH 7.2 DOWNGRADE MITIGATE sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables
• CVE-2004-1019 HIGH 10.0 DOWNGRADE DOWNGRADE The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denia
• CVE-2004-1013 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated
• CVE-2004-1012 HIGH 10.0 DOWNGRADE DOWNGRADE The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated
• CVE-2004-1011 HIGH 10.0 DOWNGRADE DOWNGRADE Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, a
• CVE-2004-0990 HIGH 10.0 DOWNGRADE DOWNGRADE Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote atta
• CVE-2004-0989 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote
• CVE-2004-0977 LOW 2.1 UPGRADE MITIGATE The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a sym
• CVE-2004-0957 MEDIUM 6.8 DOWNGRADE DOWNGRADE Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name
• CVE-2004-0941 HIGH 10.0 DOWNGRADE MITIGATE Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to
• CVE-2004-0940 HIGH 7.8 UPGRADE DOWNGRADE Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can c
• CVE-2004-0918 MEDIUM 5.0 DOWNGRADE DOWNGRADE The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows
• CVE-2004-0801 HIGH 7.5 DOWNGRADE DOWNGRADE Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with acc
• CVE-2004-0686 MEDIUM 5.0 UPGRADE MITIGATE Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabl
• CVE-2004-0685 MEDIUM 4.6 MITIGATE MITIGATE Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which c
• CVE-2004-0600 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to
• CVE-2004-0595 MEDIUM 6.8 MITIGATE MITIGATE The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters w
• CVE-2004-0594 MEDIUM 5.1 DOWNGRADE MITIGATE The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such a
• CVE-2004-0565 LOW 2.1 DOWNGRADE MITIGATE Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does no
• CVE-2004-0493 MEDIUM 6.4 MITIGATE MITIGATE The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of serv
• CVE-2004-0432 HIGH 7.5 DOWNGRADE MITIGATE ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which
• CVE-2004-0421 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of servic
• CVE-2004-0415 LOW 2.1 MITIGATE MITIGATE Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to acc
• CVE-2003-0962 HIGH 7.5 DOWNGRADE DOWNGRADE Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to exec
• CVE-2002-1319 LOW 2.1 MITIGATE MITIGATE The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a den
• CVE-2002-0083 CRITICAL 9.8 DOWNGRADE DOWNGRADE Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve
• CVE-2002-0002 HIGH 7.5 DOWNGRADE MITIGATE Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp
• CVE-2001-1240 HIGH 10.0 MITIGATE The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run cert
• CVE-2001-0739 HIGH 7.2 MITIGATE Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental
• CVE-2001-0736 LOW 2.1 DOWNGRADE UPGRADE Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local us
• CVE-2001-0169 LOW 2.1 MITIGATE MITIGATE When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that prel
• CVE-2001-0142 LOW 1.2 DOWNGRADE DOWNGRADE squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurati
• CVE-2001-0117 LOW 1.2 DOWNGRADE MITIGATE sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
• CVE-2000-1009 HIGH 7.2 MITIGATE MITIGATE dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local
• CVE-2000-0867 HIGH 7.2 MITIGATE MITIGATE Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows lo
• CVE-2000-0791 MEDIUM 4.6 MITIGATE Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users
• CVE-2000-0666 HIGH 10.0 MITIGATE MITIGATE rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format s

FAQ

How do I fix secure linux vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is secure linux being exploited right now?

None of the tracked secure linux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which secure linux CVE should I patch first?

CVE-2002-0083 currently ranks highest (73/100): Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious serve.

RSS feed for secure linux · ← Back to latest CVEs