Red Hat Security AdvisoryRHSA-2014:0475
kernel security and bug fix update
Released 2014-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.17.1.el6, kernel-abi-whitelists-2.6.32-431.17.1.el6, kernel-debug-2.6.32-431.17.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.17.1.el6, python-perf-2.6.32-431.17.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.17.1.el6, kernel-abi-whitelists-2.6.32-431.17.1.el6, kernel-debug-2.6.32-431.17.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.17.1.el6, python-perf-2.6.32-431.17.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.17.1.el6, kernel-abi-whitelists-2.6.32-431.17.1.el6, kernel-bootwrapper-2.6.32-431.17.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.17.1.el6, python-perf-2.6.32-431.17.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.17.1.el6, kernel-abi-whitelists-2.6.32-431.17.1.el6, kernel-debug-2.6.32-431.17.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.17.1.el6, python-perf-2.6.32-431.17.1.el6
Fixes 3 records
Priority MEDIUM 55
net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary c…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10385 · Published 2014-03-24 · Fixed CWE-20
Priority LOW 31
The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00494 · Published 2013-11-27 · Fixed CWE-264
Priority LOW 26
drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service (memory corruption and host…
CVSS 2.0MEDIUM 5.5· Adjacent network · Low privileges · Interaction — · EPSS 0.0081 · Published 2014-04-14 · Fixed CWE-787
THREATIST.IORead the docs