Red Hat Security AdvisoryRHSA-2014:0159
kernel security and bug fix update
Released 2014-02-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.5.1.el6, kernel-abi-whitelists-2.6.32-431.5.1.el6, kernel-debug-2.6.32-431.5.1.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.5.1.el6, python-perf-2.6.32-431.5.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.5.1.el6, kernel-abi-whitelists-2.6.32-431.5.1.el6, kernel-debug-2.6.32-431.5.1.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.5.1.el6, python-perf-2.6.32-431.5.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.5.1.el6, kernel-abi-whitelists-2.6.32-431.5.1.el6, kernel-bootwrapper-2.6.32-431.5.1.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.5.1.el6, python-perf-2.6.32-431.5.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.5.1.el6, kernel-abi-whitelists-2.6.32-431.5.1.el6, kernel-debug-2.6.32-431.5.1.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.5.1.el6, python-perf-2.6.32-431.5.1.el6
Fixes 4 records
Priority LOW 31
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an S…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00551 · Published 2013-11-27 · Fixed CWE-119
Priority LOW 23
The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00461 · Published 2014-01-06 · Partial fix CWE-20
Priority LOW 23
The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00461 · Published 2014-01-06 · Fixed CWE-20
Priority LOW 17
The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted ap…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00654 · Published 2013-12-09 · Fixed CWE-264
THREATIST.IORead the docs