Red Hat Security AdvisoryRHSA-2008:0275
kernel security and bug fix update
Released 2008-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-53.1.21.el5, kernel-2.6.18-53.1.21.el5.ia64, kernel-PAE-2.6.18-53.1.21.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-53.1.21.el5, kernel-PAE-2.6.18-53.1.21.el5, kernel-PAE-devel-2.6.18-53.1.21.el5 +8
Fixes 4 records
Priority LOW 36
The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02452 · Published 2008-05-08 · Fixed CWE-16
Priority LOW 23
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00393 · Published 2008-05-08 · Fixed CWE-399
Priority LOW 23
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry val…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00392 · Published 2008-04-12 · Fixed CWE-189
Priority LOW 19
The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00347 · Published 2007-09-26 · Fixed CWE-399