Red Hat Security AdvisoryRHSA-2017:0323
kernel security update
Released 2017-02-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-419.el5, kernel-2.6.18-419.el5.ia64, kernel-PAE-2.6.18-419.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-419.el5, kernel-PAE-2.6.18-419.el5, kernel-PAE-devel-2.6.18-419.el5 +8
Fixes 2 records
Priority MEDIUM 43
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cau…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0596 · Published 2017-02-18 · Partial fix CWE-415
Priority MEDIUM 41
It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could r…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05154 · Published 2018-07-27 · Fixed CWE-476
