Red Hat Security AdvisoryRHSA-2009:0264
kernel security update
Released 2009-02-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-128.1.1.el5, kernel-2.6.18-128.1.1.el5.ia64, kernel-PAE-2.6.18-128.1.1.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-128.1.1.el5, kernel-PAE-2.6.18-128.1.1.el5, kernel-PAE-devel-2.6.18-128.1.1.el5 +8
Fixes 6 records
Priority MEDIUM 60
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FO…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1673 · Published 2009-01-07 · Fixed CWE-119
Priority MEDIUM 40
Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesys…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03004 · Published 2008-11-17 · Fixed CWE-119
Priority MEDIUM 40
The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to ca…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03294 · Published 2008-11-05 · Fixed CWE-20
Priority LOW 39
Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem i…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02904 · Published 2008-11-05 · Fixed CWE-119
Priority LOW 24
The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonst…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00743 · Published 2008-12-24 · Fixed CWE-399
Priority LOW 23
Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors rela…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00408 · Published 2009-01-21 · Fixed CWE-399