2017-07-04
ALT-BU-2017-3210-1
Branch c8 update bulletin.
Package kernel-image-un-def updated to version 4.9.34-alt0.M80C.1 for branch c8 in task 184727.
Closed vulnerabilities
Published: 2017-06-18
BDU:2017-01612
Уязвимость ядра операционной системы Linux, позволяющая нарушителю манипулировать стеком
Severity: HIGH (7.8)
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-06-19
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-1000379
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- 99284
- 99284
- RHSA-2017:1482
- RHSA-2017:1482
- RHSA-2017:1484
- RHSA-2017:1484
- RHSA-2017:1485
- RHSA-2017:1485
- RHSA-2017:1486
- RHSA-2017:1486
- RHSA-2017:1487
- RHSA-2017:1487
- RHSA-2017:1488
- RHSA-2017:1488
- RHSA-2017:1489
- RHSA-2017:1489
- RHSA-2017:1490
- RHSA-2017:1490
- RHSA-2017:1491
- RHSA-2017:1491
- RHSA-2017:1616
- RHSA-2017:1616
- RHSA-2017:1647
- RHSA-2017:1647
- RHSA-2017:1712
- RHSA-2017:1712
- RHSA-2017:1842
- RHSA-2017:1842
- https://access.redhat.com/security/cve/CVE-2017-1000379
- https://access.redhat.com/security/cve/CVE-2017-1000379
- 42275
- 42275
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
- https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt