ALT Linux Team

Branch c8.1 update on 2019-03-01

2019-03-01

ALT-BU-2019-3518-1

Branch c8.1 update bulletin.

ALT-PU-2019-1325-1

Package kernel-image-srv-restricted updated to version 4.9.160-alt0.M80C.1 for branch c8.1 in task 222835.

Closed vulnerabilities

Published: 2018-02-09
Modified: 2024-11-21

CVE-2018-1000026

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

Severity: MEDIUM (6.8) Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Severity: HIGH (7.7) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
References:

ALT-PU-2019-1326-1

Package kernel-image-std-restricted updated to version 4.9.160-alt0.M80C.1 for branch c8.1 in task 222837.

Closed vulnerabilities

Published: 2018-02-09
Modified: 2024-11-21

CVE-2018-1000026

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

Severity: MEDIUM (6.8) Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Severity: HIGH (7.7) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top