Red Hat Security Advisory

RHSA-2015:0062

kernel security, bug fix, and enhancement update

Released 2015-01-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5) kernel-2.6.32-431.46.2.el6, python-perf-2.6.32-431.46.2.el6
Red Hat Enterprise Linux HPC Node EUS (v. 6.5) kernel-2.6.32-431.46.2.el6, kernel-abi-whitelists-2.6.32-431.46.2.el6, kernel-debug-2.6.32-431.46.2.el6 +6
Red Hat Enterprise Linux Server EUS (v. 6.5) kernel-2.6.32-431.46.2.el6, kernel-abi-whitelists-2.6.32-431.46.2.el6, kernel-bootwrapper-2.6.32-431.46.2.el6 +9
Red Hat Enterprise Linux Server Optional EUS (v. 6.5) kernel-2.6.32-431.46.2.el6, python-perf-2.6.32-431.46.2.el6

Fixes 5 records

TI-2014-03003 CVE-2014-3687 · GHSA-g3cq-4g9m-v985

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP…

MEDIUM 44

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks tha…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08579 Published 2014-11-10 Partial fix CWE-400

TI-2014-02990 CVE-2014-3673 · GHSA-g35v-9m6f-v2fq

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…

MEDIUM 43

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07461 Published 2014-11-10 Partial fix CWE-20

TI-2014-03794 CVE-2014-4608 · GHSA-3crv-xrq6-c4hq

Multiple integer overflows in the lzo1x_decompress_safe function in…

MEDIUM 40

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.05421 Published 2014-07-03 Partial fix CWE-190

TI-2014-03004 CVE-2014-3688 · GHSA-v2ph-65j5-h6m5

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to…

LOW 32

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an association's output queue, as demonstrated…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0585 Published 2014-11-30 Partial fix CWE-399

TI-2014-04144 CVE-2014-5045 · GHSA-9pvv-pv37-92f4

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not…

LOW 28

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows…

CVSS 2.0MEDIUM 6.2 Local No auth Interaction — EPSS 0.00487 Published 2014-08-01 Fixed CWE-59