ALT Linux Team

Branch p8 update on 2017-07-11

2017-07-11

ALT-BU-2017-3227-1

Branch p8 update bulletin.

ALT-PU-2017-1843-1

Package kernel-image-std-def updated to version 4.4.76-alt0.M80P.1 for branch p8 in task 185117.

Closed vulnerabilities

Published: 2018-01-03
Modified: 2025-01-03

CVE-2017-18017

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:

ALT-PU-2017-1844-1

Package kernel-image-std-pae updated to version 4.4.76-alt0.M80P.1 for branch p8 in task 185118.

Closed vulnerabilities

Published: 2017-06-18

BDU:2017-01479

Уязвимость в реализации механизма Stack Guard-Page ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.4) Vector: AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-06-19
Modified: 2024-11-21

CVE-2017-1000364

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

Severity: HIGH (7.4) Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top