Red Hat Security AdvisoryRHSA-2007:0705
kernel security update
Released 2007-09-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-8.1.10.el5, kernel-2.6.18-8.1.10.el5.ia64, kernel-PAE-2.6.18-8.1.10.el5 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-8.1.10.el5, kernel-PAE-2.6.18-8.1.10.el5, kernel-PAE-devel-2.6.18-8.1.10.el5 +6
Fixes 8 records
Priority LOW 31
Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a craf…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00384 · Published 2007-03-02 · Fixed CWE-119
Priority LOW 30
The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of servi…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.01395 · Published 2007-06-11 · Fixed
Priority LOW 27
The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locati…
CVSS 2.0MEDIUM 6.0· Local · Low privileges · Interaction — · EPSS 0.00313 · Published 2007-08-13 · Fixed CWE-399
Priority LOW 25
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as d…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02624 · Published 2007-08-09 · Fixed
Priority LOW 24
The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00881 · Published 2007-05-29 · Fixed
Priority LOW 22
mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (OOPS) via unspecified…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00375 · Published 2007-09-14 · Fixed CWE-119
Priority LOW 21
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.0038 · Published 2007-09-14 · Fixed CWE-264
Priority LOW 12
Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00436 · Published 2007-06-11 · Fixed CWE-189