Novell Linux Desktop vulnerabilities

11 CVEs affecting Novell Linux Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3547, published 2009-11-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0736, published 2006-02-27. High severity, CVSS 10.0. EPSS: 7.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via…
CVE-2009-3547, published 2009-11-04. High severity, CVSS 7.0. EPSS: 4.9% chance of exploitation in the next 30 days. Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting…
CVE-2008-5021, published 2008-11-13. High severity, CVSS 9.3. EPSS: 3.6% chance of exploitation in the next 30 days. nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash)…
CVE-2007-6716, published 2008-09-04. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a…
CVE-2009-2848, published 2009-08-18. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory…
CVE-2005-1761, published 2005-08-05. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.
CVE-2005-1767, published 2005-08-05. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).
CVE-2005-1040, published 2005-05-02. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."
CVE-2008-2812, published 2008-07-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL…
CVE-2005-1763, published 2005-06-09. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.

Latest

CVE-2005-1065, published 2005-05-02. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/fonts directory.