Red Hat Security AdvisoryRHSA-2014:0284
kernel security and bug fix update
Released 2014-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel-2.6.32-358.37.1.el6, python-perf-2.6.32-358.37.1.el6
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-2.6.32-358.37.1.el6, kernel-debug-2.6.32-358.37.1.el6, kernel-debug-devel-2.6.32-358.37.1.el6 +4
- Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-2.6.32-358.37.1.el6, kernel-bootwrapper-2.6.32-358.37.1.el6, kernel-debug-2.6.32-358.37.1.el6 +7
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel-2.6.32-358.37.1.el6, python-perf-2.6.32-358.37.1.el6
Fixes 7 records
Priority LOW 32
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.02578 · Published 2013-10-10 · Fixed CWE-119
Priority LOW 31
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an S…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00551 · Published 2013-11-27 · Fixed CWE-119
Priority LOW 31
The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system cra…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00589 · Published 2013-11-04 · Fixed CWE-264
Priority LOW 29
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00613 · Published 2013-12-14 · Partial fix CWE-20
Priority LOW 29
The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifica…
CVSS 2.0MEDIUM 5.7· Adjacent network · No auth · Interaction — · EPSS 0.01446 · Published 2013-12-14 · Partial fix CWE-189
Priority LOW 28
Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecif…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00566 · Published 2013-11-19 · Fixed CWE-119
Priority LOW 27
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/mo…
CVSS 2.0MEDIUM 6.0· Local · Low privileges · Interaction — · EPSS 0.0034 · Published 2013-06-07 · Fixed CWE-134