Branch sisyphus update bulletin.

Package kernel-image-el7-def updated to version 3.10.0-alt9 for branch sisyphus in task 122093.

Published: 2014-07-17

BDU:2014-00052

Уязвимость операционной системы Linux, позволяющая злоумышленнику получить доступ к защищаемой информации

Severity: MEDIUM (4.9)

References:

CVE-2014-1738

Published: 2014-05-11

BDU:2014-00053

Уязвимость операционной системы Linux, позволяющая злоумышленнику получить доступ к защищаемой информации

Severity: HIGH (7.2)

References:

CVE-2014-1737

Published: 2014-05-11

BDU:2014-00062

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: MEDIUM (4.9)

References:

CVE-2014-3144

Published: 2014-06-07

BDU:2014-00063

Уязвимость ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии или вызвать отказ в обслуживании

Severity: HIGH (7.2)

References:

Published: 2014-05-11

BDU:2014-00064

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: MEDIUM (4.9)

References:

CVE-2014-3145

Published: 2014-05-11

BDU:2014-00110

Уязвимость операционной системы Linux, позволяющая злоумышленнику повысить свои привилегии

Severity: HIGH (7.2)

References:

CVE-2014-1737

Published: 2014-05-11

BDU:2014-00111

Уязвимость операционной системы Linux, позволяющая злоумышленнику повысить свои привилегии

Severity: MEDIUM (4.9)

References:

CVE-2014-1738

Published: 2014-05-11

BDU:2014-00334

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании или повысить свои привилегии

Severity: HIGH (7.2)

References:

Published: 2014-04-14

BDU:2014-00335

References:

Published: 2013-01-22

BDU:2015-04307

Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2014-06-07

BDU:2015-05900

Уязвимость операционной системы openSUSE, позволяющая злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05901

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05902

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05903

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05904

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05905

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05906

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05907

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05908

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05909

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05910

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05911

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05912

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05913

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05914

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05915

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05916

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05917

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05918

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05919

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05920

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05921

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 1970-01-01

BDU:2015-05922

Severity: HIGH (7.2)

References:

CVE-2014-3153

Published: 2014-06-25
Modified: 2024-11-21

CVE-2014-0206

Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value.

Severity: LOW (2.1)

References:

Published: 2014-05-12
Modified: 2024-11-21

CVE-2014-1737

The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.

Severity: HIGH (7.2)

References:

Published: 2014-05-12
Modified: 2024-11-21

CVE-2014-1738

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

Severity: LOW (2.1)

References:

Published: 2014-03-24
Modified: 2024-11-21

CVE-2014-2568

Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.

Severity: LOW (2.9)

References:

Published: 2014-04-15
Modified: 2024-11-21

CVE-2014-2851

Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.

References:

Published: 2014-05-12
Modified: 2024-11-21

CVE-2014-3144

The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.

Severity: MEDIUM (4.9)

References:

Published: 2014-05-12
Modified: 2024-11-21

CVE-2014-3145

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

Severity: MEDIUM (4.9)

References:

Published: 2014-06-07
Modified: 2025-02-07

CVE-2014-3153

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Package cups updated to version 1.7.3-alt2 for branch sisyphus in task 122180.

Ошибки при обновлении

Package kernel-image-std-def updated to version 3.12.23-alt1 for branch sisyphus in task 122178.

Published: 2017-02-07
Modified: 2024-11-21

CVE-2014-9914

Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Package squid updated to version 3.4.6-alt1 for branch sisyphus in task 122152.

Published: 2014-08-28

BDU:2015-00690

Уязвимость программного обеспечения Squid HTTP Proxy Server, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

Severity: MEDIUM (5.0)

References:

Published: 2014-09-11

BDU:2015-04283

Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации

Severity: MEDIUM (5.0)

References:

CVE-2014-3609

Published: 2014-09-11
Modified: 2024-11-21

CVE-2014-3609

HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."

Severity: MEDIUM (5.0)

References:

Version: 2.1.0

ALT-BU-2014-2851-1

Closed vulnerabilities

Closed bugs

Closed vulnerabilities

Closed vulnerabilities