Red Hat Security AdvisoryRHSA-2008:0508
kernel security and bug fix update
Released 2008-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-67.0.20.EL, kernel-2.6.9-67.0.20.EL.ia64, kernel-2.6.9-67.0.20.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-67.0.20.EL, kernel-devel-2.6.9-67.0.20.EL, kernel-doc-2.6.9-67.0.20.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-67.0.20.EL, kernel-2.6.9-67.0.20.EL.ia64, kernel-devel-2.6.9-67.0.20.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-67.0.20.EL, kernel-2.6.9-67.0.20.EL.ia64, kernel-devel-2.6.9-67.0.20.EL +12
Fixes 4 records
Priority LOW 38
gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02791 · Published 2008-03-17 · Fixed CWE-399
Priority LOW 23
arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive i…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0057 · Published 2008-06-30 · Fixed CWE-200
Priority LOW 23
Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0037 · Published 2008-06-30 · Fixed CWE-200
Priority LOW 22
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_A…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00526 · Published 2008-06-30 · Fixed CWE-362
THREATIST.IORead the docs