Red Hat Security AdvisoryRHSA-2014:0432
kernel security and bug fix update
Released 2014-04-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, python-perf-2.6.32-358.41.1.el6
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, kernel-debug-2.6.32-358.41.1.el6, kernel-debug-devel-2.6.32-358.41.1.el6 +5
- Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, kernel-bootwrapper-2.6.32-358.41.1.el6, kernel-debug-2.6.32-358.41.1.el6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel-2.6.32-358.41.1.el6, python-perf-2.6.32-358.41.1.el6
Fixes 1 record
Priority MEDIUM 44
The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.07179 · Published 2014-03-11 · Partial fix CWE-476
