The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them.

Computer vulnerabilities of Slackware Linux

threat alert CVE-2018-13100

Linux kernel: denial of service via secs_per_zone

Synthesis of the vulnerability

An attacker can generate a fatal error via secs_per_zone of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 04/07/2018.
Identifiers: CERTFR-2019-AVI-145, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13100, DLA-1715-1, openSUSE-SU-2018:3202-1, SSA:2019-030-01, USN-3932-1, USN-3932-2, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26621.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can generate a fatal error via secs_per_zone of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

weakness announce CVE-2018-13099

Linux kernel: out-of-bounds memory reading via fs/f2fs/inline.c

Synthesis of the vulnerability

An attacker can force a read at an invalid address via fs/f2fs/inline.c of the Linux kernel, in order to trigger a denial of service, or to obtain sensitive information.
Severity: 2/4.
Creation date: 04/07/2018.
Identifiers: CERTFR-2019-AVI-145, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13099, DLA-1531-1, DSA-4308-1, openSUSE-SU-2018:3202-1, SSA:2019-030-01, USN-3932-1, USN-3932-2, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26620.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force a read at an invalid address via fs/f2fs/inline.c of the Linux kernel, in order to trigger a denial of service, or to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

cybersecurity announce CVE-2018-13097

Linux kernel: out-of-bounds memory reading via user_block_count

Synthesis of the vulnerability

An attacker can force a read at an invalid address via user_block_count of the Linux kernel, in order to trigger a denial of service, or to obtain sensitive information.
Severity: 2/4.
Creation date: 04/07/2018.
Identifiers: CERTFR-2019-AVI-145, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13097, DLA-1715-1, openSUSE-SU-2018:3202-1, SSA:2019-030-01, USN-3932-1, USN-3932-2, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26618.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force a read at an invalid address via user_block_count of the Linux kernel, in order to trigger a denial of service, or to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

computer threat alert CVE-2018-13096

Linux kernel: assertion error via fs/f2fs/super.c

Synthesis of the vulnerability

An attacker can force an assertion error via fs/f2fs/super.c of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 04/07/2018.
Identifiers: CERTFR-2018-AVI-557, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13096, DLA-1715-1, openSUSE-SU-2018:3202-1, SSA:2019-030-01, USN-3821-1, USN-3821-2, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26617.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force an assertion error via fs/f2fs/super.c of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

security announce CVE-2018-13053

Linux kernel: integer overflow via alarm_timer_nsleep

Synthesis of the vulnerability

An attacker can generate an integer overflow via alarm_timer_nsleep() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Severity: 2/4.
Creation date: 03/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-358, CERTFR-2018-AVI-365, CERTFR-2018-AVI-392, CERTFR-2018-AVI-426, CERTFR-2018-AVI-557, CERTFR-2019-AVI-183, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13053, DLA-1715-1, DLA-1731-1, DLA-1731-2, FEDORA-2018-50075276e8, openSUSE-SU-2018:2118-1, openSUSE-SU-2018:2119-1, RHSA-2019:0831-01, RHSA-2019:2029-01, RHSA-2019:2043-01, SSA:2019-030-01, SSB-439005, SUSE-SU-2018:2051-1, SUSE-SU-2018:2150-1, SUSE-SU-2018:2332-1, SUSE-SU-2018:2344-1, SUSE-SU-2018:2362-1, SUSE-SU-2018:2366-1, SUSE-SU-2018:2384-1, SUSE-SU-2018:2637-1, USN-3821-1, USN-3821-2, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26605.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can generate an integer overflow via alarm_timer_nsleep() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial)

computer threat note CVE-2018-12896

Linux kernel: denial of service via posix-timers.c

Synthesis of the vulnerability

An attacker can generate a fatal error via posix-timers.c of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 03/07/2018.
Identifiers: CERTFR-2018-AVI-456, CERTFR-2018-AVI-459, CERTFR-2018-AVI-460, CERTFR-2018-AVI-466, CERTFR-2018-AVI-480, CERTFR-2018-AVI-529, CERTFR-2018-AVI-608, CERTFR-2019-AVI-188, CVE-2018-12896, DLA-1715-1, DLA-1731-1, DLA-1731-2, FEDORA-2018-50075276e8, openSUSE-SU-2018:2738-1, openSUSE-SU-2018:3071-1, SSA:2019-030-01, SUSE-SU-2018:2858-1, SUSE-SU-2018:2862-1, SUSE-SU-2018:2879-1, SUSE-SU-2018:2908-1, SUSE-SU-2018:2908-2, SUSE-SU-2018:2980-1, SUSE-SU-2018:3083-1, SUSE-SU-2018:3084-1, SUSE-SU-2018:3088-1, SUSE-SU-2018:3618-1, USN-3847-1, USN-3847-2, USN-3847-3, USN-3848-1, USN-3848-2, USN-3849-1, USN-3849-2, VIGILANCE-VUL-26604.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can generate a fatal error via posix-timers.c of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

security weakness CVE-2018-7755

Linux kernel: information disclosure via fd_locked_ioctl

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via fd_locked_ioctl() of the Linux kernel, in order to obtain sensitive information.
Severity: 1/4.
Creation date: 03/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-321, CVE-2018-7755, DLA-1529-1, DLA-1531-1, DSA-4308-1, RHSA-2019:2029-01, RHSA-2019:2043-01, SSA:2019-030-01, USN-3695-1, USN-3695-2, USN-3696-1, USN-3696-2, USN-3697-1, USN-3697-2, USN-3698-1, USN-3698-2, USN-3718-1, USN-3718-2, VIGILANCE-VUL-26600.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can bypass access restrictions to data via fd_locked_ioctl() of the Linux kernel, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

vulnerability note CVE-2018-5848

Linux kernel: integer overflow via wmi_set_ie

Synthesis of the vulnerability

An attacker can generate an integer overflow via wmi_set_ie() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Severity: 2/4.
Creation date: 20/06/2018.
Identifiers: CERTFR-2018-AVI-299, CERTFR-2018-AVI-301, CERTFR-2018-AVI-308, CERTFR-2018-AVI-319, CVE-2018-5848, DLA-1715-1, DLA-1731-1, DLA-1731-2, openSUSE-SU-2018:1773-1, openSUSE-SU-2018:2119-1, RHSA-2018:2948-01, RHSA-2018:3083-01, RHSA-2018:3096-01, SSA:2019-030-01, SUSE-SU-2018:1761-1, SUSE-SU-2018:1762-1, SUSE-SU-2018:1772-1, SUSE-SU-2018:1816-1, SUSE-SU-2018:1855-1, VIGILANCE-VUL-26464.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can generate an integer overflow via wmi_set_ie() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial)

security threat CVE-2018-10360

Fine Free file: out-of-bounds memory reading via do_core_note

Synthesis of the vulnerability

An attacker can force a read at an invalid address via do_core_note() of Fine Free file, in order to trigger a denial of service, or to obtain sensitive information.
Severity: 2/4.
Creation date: 14/06/2018.
Identifiers: CVE-2018-10360, FEDORA-2018-b5de855e94, openSUSE-SU-2018:2694-1, openSUSE-SU-2019:0345-1, openSUSE-SU-2019:1197-1, SSA:2018-212-01, SUSE-SU-2018:2044-1, SUSE-SU-2018:2682-1, SUSE-SU-2019:0571-1, SUSE-SU-2019:0839-1, USN-3686-1, USN-3686-2, VIGILANCE-VUL-26433.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force a read at an invalid address via do_core_note() of Fine Free file, in order to trigger a denial of service, or to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

computer vulnerability CVE-2018-5738

ISC BIND: information disclosure via Recursive Query

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via Recursive Query of ISC BIND, in order to obtain sensitive information.
Severity: 2/4.
Creation date: 13/06/2018.
Identifiers: CERTFR-2018-AVI-281, CVE-2018-5738, SSA:2018-192-01, USN-3683-1, VIGILANCE-VUL-26411.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can bypass access restrictions to data via Recursive Query of ISC BIND, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)
Our database contains other pages. You can request a free trial to read them.

Display information about Slackware Linux: