Red Hat Security AdvisoryRHSA-2013:1173
kernel security and bug fix update
Released 2013-08-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-358.18.1.el6, kernel-debug-2.6.32-358.18.1.el6, kernel-debug-devel-2.6.32-358.18.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-358.18.1.el6, python-perf-2.6.32-358.18.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-358.18.1.el6, kernel-debug-2.6.32-358.18.1.el6, kernel-debug-devel-2.6.32-358.18.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-358.18.1.el6, python-perf-2.6.32-358.18.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-358.18.1.el6, kernel-bootwrapper-2.6.32-358.18.1.el6, kernel-debug-2.6.32-358.18.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-358.18.1.el6, python-perf-2.6.32-358.18.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-358.18.1.el6, kernel-debug-2.6.32-358.18.1.el6, kernel-debug-devel-2.6.32-358.18.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-358.18.1.el6, python-perf-2.6.32-358.18.1.el6
Fixes 6 records
Priority LOW 32
The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO chunk, w…
CVSS 2.0MEDIUM 5.4· Network · No auth · Interaction — · EPSS 0.04707 · Published 2013-07-04 · Fixed
Priority LOW 30
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00358 · Published 2013-07-04 · Fixed
Priority LOW 23
The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a denial of service (system crash) by using an AF_INET6 socket for a connection to an IPv4 interface.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00535 · Published 2013-07-04 · Fixed CWE-20
Priority LOW 22
arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general pr…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00502 · Published 2013-06-07 · Fixed CWE-20
Priority LOW 12
The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00536 · Published 2013-07-04 · Fixed CWE-119
Priority LOW 11
The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application tha…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00371 · Published 2013-03-14 · Fixed CWE-200
THREATIST.IORead the docs