Red Hat Security AdvisoryRHSA-2017:1615
kernel security and bug fix update
Released 2017-06-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-514.26.1.el7, kernel-abi-whitelists-3.10.0-514.26.1.el7, kernel-debug-3.10.0-514.26.1.el7 +8
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.26.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-514.26.1.el7, kernel-abi-whitelists-3.10.0-514.26.1.el7, kernel-debug-3.10.0-514.26.1.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.26.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-514.26.1.el7, kernel-abi-whitelists-3.10.0-514.26.1.el7, kernel-bootwrapper-3.10.0-514.26.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-514.26.1.el7, kernel-tools-libs-devel-3.10.0-514.26.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-514.26.1.el7, kernel-abi-whitelists-3.10.0-514.26.1.el7, kernel-debug-3.10.0-514.26.1.el7 +8
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-514.26.1.el7
Fixes 5 records
Priority MEDIUM 55
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1081 · Published 2017-04-28 · Fixed CWE-119
Priority MEDIUM 42
The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05905 · Published 2017-04-18 · Partial fix CWE-20
Priority MEDIUM 40
The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04666 · Published 2017-02-23 · Fixed CWE-835
Priority LOW 37
The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (g…
CVSS 3.0HIGH 8.4· Local · No auth · No interaction · EPSS 0.00605 · Published 2017-02-06 · Fixed
Priority LOW 31
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2017-04-25 · Fixed CWE-119
THREATIST.IORead the docs