Red Hat Security AdvisoryRHSA-2014:1997
kernel security and bug fix update
Released 2014-12-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-504.3.3.el6, kernel-abi-whitelists-2.6.32-504.3.3.el6, kernel-debug-2.6.32-504.3.3.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-504.3.3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-504.3.3.el6, kernel-abi-whitelists-2.6.32-504.3.3.el6, kernel-debug-2.6.32-504.3.3.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-504.3.3.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-504.3.3.el6, kernel-abi-whitelists-2.6.32-504.3.3.el6, kernel-bootwrapper-2.6.32-504.3.3.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-504.3.3.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-504.3.3.el6, kernel-abi-whitelists-2.6.32-504.3.3.el6, kernel-debug-2.6.32-504.3.3.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-504.3.3.el6
Fixes 8 records
Priority MEDIUM 44
The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks tha…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08579 · Published 2014-11-10 · Partial fix CWE-400
Priority MEDIUM 43
The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07461 · Published 2014-11-10 · Partial fix CWE-20
Priority LOW 37
arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET inst…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0154 · Published 2014-12-17 · Fixed CWE-269
Priority LOW 32
The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0585 · Published 2014-11-30 · Partial fix CWE-399
Priority LOW 23
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system c…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0053 · Published 2014-09-28 · Partial fix CWE-264
Priority LOW 22
The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which allows physically proximate attackers to cause a denial of service (infinite loop…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.0051 · Published 2014-09-28 · Partial fix CWE-399
Priority LOW 19
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-refere…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-20
Priority LOW 19
Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system cr…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-399
THREATIST.IORead the docs