Red Hat Security AdvisoryRHSA-2013:1449
kernel security and bug fix update
Released 2013-10-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-371.1.2.el5, kernel-2.6.18-371.1.2.el5.ia64, kernel-PAE-2.6.18-371.1.2.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-371.1.2.el5, kernel-PAE-2.6.18-371.1.2.el5, kernel-PAE-devel-2.6.18-371.1.2.el5 +8
Fixes 4 records
Priority LOW 33
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block dev…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.03793 · Published 2013-10-24 · Fixed CWE-200
Priority LOW 32
Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple request…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.03209 · Published 2013-10-10 · Fixed CWE-189
Priority LOW 19
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial…
CVSS 2.0LOW 3.2· Adjacent network · No auth · Interaction — · EPSS 0.01662 · Published 2013-02-28 · Fixed
Priority LOW 11
The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive in…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00367 · Published 2013-10-17 · Fixed CWE-200