Branch p8 update bulletin.

Package putty updated to version 0.68-alt1 for branch p8 in task 178532.

Published: 2017-03-27
Modified: 2024-11-21

CVE-2017-6542

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.

Severity: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Package kernel-image-un-def updated to version 4.9.12-alt0.M80P.1 for branch p8 in task 178566.

Published: 2017-02-07

BDU:2017-01558

Уязвимость операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.5) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

CVE-2017-5986

Published: 2017-02-19
Modified: 2024-11-21

CVE-2017-5986

Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state.

Severity: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Version: 2.1.0

Branch p8 update on 2017-02-26

ALT-BU-2017-2958-1

ALT-PU-2017-1208-1

Closed vulnerabilities

CVE-2017-6542

ALT-PU-2017-1211-1

Closed vulnerabilities

BDU:2017-01558

CVE-2017-5986