Red Hat Security AdvisoryRHSA-2012:1323
kernel security and bug fix update
Released 2012-10-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-308.16.1.el5, kernel-2.6.18-308.16.1.el5.ia64, kernel-PAE-2.6.18-308.16.1.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-308.16.1.el5, kernel-PAE-2.6.18-308.16.1.el5, kernel-PAE-devel-2.6.18-308.16.1.el5 +8
Fixes 4 records
Priority MEDIUM 43
The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that tr…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.05919 · Published 2012-10-03 · Partial fix CWE-189
Priority LOW 32
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00397 · Published 2012-05-17 · Fixed CWE-264
Priority LOW 26
Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of servi…
CVSS 2.0MEDIUM 5.6· Local · No auth · Interaction — · EPSS 0.00505 · Published 2012-10-03 · Fixed CWE-399
Priority LOW 13
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory v…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00952 · Published 2012-10-03 · Partial fix CWE-200