Red Hat Security AdvisoryRHSA-2018:3459
kernel security, bug fix, and enhancement update
Released 2018-11-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.20.2.el7, kernel-abi-whitelists-3.10.0-862.20.2.el7, kernel-debug-3.10.0-862.20.2.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.20.2.el7
- Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.20.2.el7, kernel-abi-whitelists-3.10.0-862.20.2.el7, kernel-bootwrapper-3.10.0-862.20.2.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.20.2.el7, kernel-tools-libs-devel-3.10.0-862.20.2.el7
Fixes 2 records
Priority MEDIUM 57
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.32445 · Published 2018-09-06 · Partial fix CWE-400
Priority LOW 31
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer fu…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.03443 · Published 2018-07-26 · Fixed CWE-125
