Rafal Wojtczuk

O problema está relacionado a um estouro de buffer na função Reclaim, permitindo que invasores fisicamente próximos obtenham privilégios por meio de um nome de variável longo.

A buffer overflow issue exists in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) that allows local users to bypass the Trusted Execution Technology protection mechanism. This issue can be exploited via unspecified vectors, allowing users to perform other unspecified SINIT ACM functions.

The issue is related to multiple vulnerabilities in the Linux kernel, which can be exploited remotely to disrupt the availability of protected information. The `do anonymous page` function in `mm/memory.c` does not properly separate the stack and the heap, allowing context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment.

The issue allows remote attackers to cause a denial of service via crafted fragmented packets, resulting in a NULL pointer dereference and crash. This is due to a problem in the `ip evictor` function in `ip fragment.c`, which is used in products such as dsniff.

The issue allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized. This is due to an information disclosure vulnerability in the Server service, which could allow an attacker to view fragments of memory used to store SMB traffic during transport.

The issue allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

The issue is related to multiple integer overflows in libext2fs in e2fsprogs, which can allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image. This can lead to a violation of confidentiality and integrity of protected information. The exploitation of the issue can be carried out remotely.