Red Hat Security AdvisoryRHSA-2014:0520
kernel security and bug fix update
Released 2014-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 6.2) kernel-2.6.32-220.51.1.el6, kernel-debug-2.6.32-220.51.1.el6, kernel-debug-devel-2.6.32-220.51.1.el6 +5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel-2.6.32-220.51.1.el6, python-perf-2.6.32-220.51.1.el6
Fixes 3 records
Priority HIGH 82KEV
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory co…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.20329 · Published 2014-05-07 · Fixed CWE-362
Priority MEDIUM 55
net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary c…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10385 · Published 2014-03-24 · Fixed CWE-20
Priority MEDIUM 44
The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.07179 · Published 2014-03-11 · Partial fix CWE-476