Red Hat Security AdvisoryRHSA-2017:1567
Red Hat Container Development Kit 3.0.0 security update
Released 2017-06-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Container Development Kit 3.0
Fixes 3 records
Priority MEDIUM 41
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel ve…
CVSS 3.0HIGH 7.4· Local · No auth · No interaction · EPSS 0.05186 · Published 2017-06-19 · Partial fix CWE-119
Priority MEDIUM 40
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04302 · Published 2017-05-30 · Partial fix CWE-476
Priority LOW 39
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02733 · Published 2017-06-19 · Partial fix CWE-119
