| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3280 | 7.8 |
Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets.
|
06-08-2020 - 14:56 | 21-09-2009 - 19:30 | |
| CVE-2009-1883 | 4.4 |
The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
|
29-09-2017 - 01:34 | 18-09-2009 - 10:30 | |
| CVE-2009-3290 | 7.2 |
The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to
|
19-09-2017 - 01:29 | 22-09-2009 - 10:30 | |
| CVE-2009-2473 | 4.3 |
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large numbe
|
19-09-2017 - 01:29 | 21-08-2009 - 17:30 | |
| CVE-2009-3026 | 5.0 |
protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect t
|
19-09-2017 - 01:29 | 31-08-2009 - 20:30 | |
| CVE-2009-3288 | 4.9 |
The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as
|
15-09-2011 - 03:06 | 22-09-2009 - 10:30 |