Red Hat Security AdvisoryRHSA-2011:0283
kernel security, bug fix, and enhancement update
Released 2011-02-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-71.18.1.el6, kernel-debug-2.6.32-71.18.1.el6, kernel-debug-devel-2.6.32-71.18.1.el6 +5
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-71.18.1.el6, kernel-debug-2.6.32-71.18.1.el6, kernel-debug-devel-2.6.32-71.18.1.el6 +5
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-71.18.1.el6, kernel-bootwrapper-2.6.32-71.18.1.el6, kernel-debug-2.6.32-71.18.1.el6 +8
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-71.18.1.el6, kernel-debug-2.6.32-71.18.1.el6, kernel-debug-devel-2.6.32-71.18.1.el6 +5
Fixes 3 records
Priority LOW 25
The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0148 · Published 2010-11-20 · Fixed CWE-369
Priority LOW 24
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0091 · Published 2011-01-22 · Fixed CWE-400
Priority LOW 23
Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00427 · Published 2010-11-20 · Fixed CWE-416
THREATIST.IORead the docs