The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.
Software | From | Fixed in |
---|---|---|
linux / linux_kernel | 2.4.0 | 2.4.0.x |
linux / linux_kernel | 2.4.0-test1 | 2.4.0-test1.x |
linux / linux_kernel | 2.4.0-test10 | 2.4.0-test10.x |
linux / linux_kernel | 2.4.0-test11 | 2.4.0-test11.x |
linux / linux_kernel | 2.4.0-test12 | 2.4.0-test12.x |
linux / linux_kernel | 2.4.0-test2 | 2.4.0-test2.x |
linux / linux_kernel | 2.4.0-test3 | 2.4.0-test3.x |
linux / linux_kernel | 2.4.0-test4 | 2.4.0-test4.x |
linux / linux_kernel | 2.4.0-test5 | 2.4.0-test5.x |
linux / linux_kernel | 2.4.0-test6 | 2.4.0-test6.x |
linux / linux_kernel | 2.4.0-test7 | 2.4.0-test7.x |
linux / linux_kernel | 2.4.0-test8 | 2.4.0-test8.x |
linux / linux_kernel | 2.4.0-test9 | 2.4.0-test9.x |
linux / linux_kernel | 2.4.1 | 2.4.1.x |
linux / linux_kernel | 2.4.10 | 2.4.10.x |
linux / linux_kernel | 2.4.11 | 2.4.11.x |
linux / linux_kernel | 2.4.12 | 2.4.12.x |
linux / linux_kernel | 2.4.13 | 2.4.13.x |
linux / linux_kernel | 2.4.14 | 2.4.14.x |
linux / linux_kernel | 2.4.15 | 2.4.15.x |
linux / linux_kernel | 2.4.16 | 2.4.16.x |
linux / linux_kernel | 2.4.17 | 2.4.17.x |
linux / linux_kernel | 2.4.18 | 2.4.18.x |
linux / linux_kernel | 2.4.18-pre1 | 2.4.18-pre1.x |
linux / linux_kernel | 2.4.18-pre2 | 2.4.18-pre2.x |
linux / linux_kernel | 2.4.18-pre3 | 2.4.18-pre3.x |
linux / linux_kernel | 2.4.18-pre4 | 2.4.18-pre4.x |
linux / linux_kernel | 2.4.18-pre5 | 2.4.18-pre5.x |
linux / linux_kernel | 2.4.18-pre6 | 2.4.18-pre6.x |
linux / linux_kernel | 2.4.18-pre7 | 2.4.18-pre7.x |
linux / linux_kernel | 2.4.18-pre8 | 2.4.18-pre8.x |
linux / linux_kernel | 2.4.19 | 2.4.19.x |
linux / linux_kernel | 2.4.19-pre1 | 2.4.19-pre1.x |
linux / linux_kernel | 2.4.19-pre2 | 2.4.19-pre2.x |
linux / linux_kernel | 2.4.19-pre3 | 2.4.19-pre3.x |
linux / linux_kernel | 2.4.19-pre4 | 2.4.19-pre4.x |
linux / linux_kernel | 2.4.19-pre5 | 2.4.19-pre5.x |
linux / linux_kernel | 2.4.19-pre6 | 2.4.19-pre6.x |
linux / linux_kernel | 2.4.2 | 2.4.2.x |
linux / linux_kernel | 2.4.20 | 2.4.20.x |
linux / linux_kernel | 2.4.21 | 2.4.21.x |
linux / linux_kernel | 2.4.21-pre1 | 2.4.21-pre1.x |
linux / linux_kernel | 2.4.21-pre4 | 2.4.21-pre4.x |
linux / linux_kernel | 2.4.21-pre7 | 2.4.21-pre7.x |
linux / linux_kernel | 2.4.22 | 2.4.22.x |
linux / linux_kernel | 2.4.22-pre10 | 2.4.22-pre10.x |
linux / linux_kernel | 2.4.23 | 2.4.23.x |
linux / linux_kernel | 2.4.23_ow2 | 2.4.23_ow2.x |
linux / linux_kernel | 2.4.23-pre9 | 2.4.23-pre9.x |
linux / linux_kernel | 2.4.24 | 2.4.24.x |
linux / linux_kernel | 2.4.24_ow1 | 2.4.24_ow1.x |
linux / linux_kernel | 2.4.25 | 2.4.25.x |
linux / linux_kernel | 2.4.26 | 2.4.26.x |
linux / linux_kernel | 2.4.27 | 2.4.27.x |
linux / linux_kernel | 2.4.27-pre1 | 2.4.27-pre1.x |
linux / linux_kernel | 2.4.27-pre2 | 2.4.27-pre2.x |
linux / linux_kernel | 2.4.27-pre3 | 2.4.27-pre3.x |
linux / linux_kernel | 2.4.27-pre4 | 2.4.27-pre4.x |
linux / linux_kernel | 2.4.27-pre5 | 2.4.27-pre5.x |
linux / linux_kernel | 2.4.28 | 2.4.28.x |
linux / linux_kernel | 2.4.29 | 2.4.29.x |
linux / linux_kernel | 2.4.29-rc1 | 2.4.29-rc1.x |
linux / linux_kernel | 2.4.29-rc2 | 2.4.29-rc2.x |
linux / linux_kernel | 2.4.3 | 2.4.3.x |
linux / linux_kernel | 2.4.3-pre3 | 2.4.3-pre3.x |
linux / linux_kernel | 2.4.4 | 2.4.4.x |
linux / linux_kernel | 2.4.5 | 2.4.5.x |
linux / linux_kernel | 2.4.6 | 2.4.6.x |
linux / linux_kernel | 2.4.7 | 2.4.7.x |
linux / linux_kernel | 2.4.8 | 2.4.8.x |
linux / linux_kernel | 2.4.9 | 2.4.9.x |
linux / linux_kernel | 2.6.9-2.6.20 | 2.6.9-2.6.20.x |