Red Hat Security AdvisoryRHSA-2006:0617
kernel security update
Released 2006-08-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-42.0.2.EL, kernel-2.6.9-42.0.2.EL.ia64, kernel-2.6.9-42.0.2.EL.ppc64iseries +12
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-42.0.2.EL, kernel-devel-2.6.9-42.0.2.EL, kernel-doc-2.6.9-42.0.2.EL +6
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-42.0.2.EL, kernel-2.6.9-42.0.2.EL.ia64, kernel-devel-2.6.9-42.0.2.EL +10
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-42.0.2.EL, kernel-2.6.9-42.0.2.EL.ia64, kernel-devel-2.6.9-42.0.2.EL +10
Fixes 9 records
Priority MEDIUM 54
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_d…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.22109 · Published 2006-05-25 · Fixed
Priority MEDIUM 50
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode numbe…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.15972 · Published 2006-07-18 · Fixed
Priority MEDIUM 43
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.06281 · Published 2006-05-22 · Fixed CWE-20
Priority LOW 39
The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port th…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0296 · Published 2006-07-10 · Fixed CWE-399
Priority LOW 32
Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00436 · Published 2006-08-23 · Fixed
Priority LOW 32
Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.02222 · Published 2006-07-15 · Fixed
Priority LOW 23
A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service (panic) via unspeci…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00385 · Published 2006-08-23 · Fixed
Priority LOW 23
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00389 · Published 2006-05-26 · Fixed
Priority LOW 22
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00575 · Published 2006-07-05 · Fixed CWE-120