ALT-PU-2014-1065-1
Package kernel-image-un-def updated to version 3.12.8-alt1 for branch sisyphus in task 112112.
Closed vulnerabilities
Published: 2014-03-24
BDU:2014-00101
Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании
Severity: MEDIUM (4.7)
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
References:
Published: 2013-01-22
BDU:2015-04307
Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: CRITICAL (10.0)
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
- CVE-2012-2372
- CVE-2013-2929
- CVE-2013-4299
- CVE-2013-4579
- CVE-2013-6382
- CVE-2013-7339
- CVE-2014-0055
- CVE-2014-0077
- CVE-2014-0101
- CVE-2014-0131
- CVE-2014-0155
- CVE-2014-1444
- CVE-2014-1445
- CVE-2014-1446
- CVE-2014-1874
- CVE-2014-2309
- CVE-2014-2523
- CVE-2014-2678
- CVE-2014-2851
- CVE-2014-3122
- CVE-2014-3144
- CVE-2014-3145
- CVE-2014-3917
- CVE-2014-4652
- CVE-2014-4653
- CVE-2014-4654
- CVE-2014-4655
- CVE-2014-4656
- CVE-2014-4699
Published: 1970-01-01
BDU:2015-04308
Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: CRITICAL (10.0)
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
- CVE-2012-2372
- CVE-2013-2929
- CVE-2013-4299
- CVE-2013-4579
- CVE-2013-6382
- CVE-2013-7339
- CVE-2014-0055
- CVE-2014-0077
- CVE-2014-0101
- CVE-2014-0131
- CVE-2014-0155
- CVE-2014-1444
- CVE-2014-1445
- CVE-2014-1446
- CVE-2014-1874
- CVE-2014-2309
- CVE-2014-2523
- CVE-2014-2678
- CVE-2014-2851
- CVE-2014-3122
- CVE-2014-3144
- CVE-2014-3145
- CVE-2014-3917
- CVE-2014-4652
- CVE-2014-4653
- CVE-2014-4654
- CVE-2014-4655
- CVE-2014-4656
- CVE-2014-4699
Published: 1970-01-01
BDU:2015-04309
Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: CRITICAL (10.0)
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
- CVE-2012-2372
- CVE-2013-2929
- CVE-2013-4299
- CVE-2013-4579
- CVE-2013-6382
- CVE-2013-7339
- CVE-2014-0055
- CVE-2014-0077
- CVE-2014-0101
- CVE-2014-0131
- CVE-2014-0155
- CVE-2014-1444
- CVE-2014-1445
- CVE-2014-1446
- CVE-2014-1874
- CVE-2014-2309
- CVE-2014-2523
- CVE-2014-2678
- CVE-2014-2851
- CVE-2014-3122
- CVE-2014-3144
- CVE-2014-3145
- CVE-2014-3917
- CVE-2014-4652
- CVE-2014-4653
- CVE-2014-4654
- CVE-2014-4655
- CVE-2014-4656
- CVE-2014-4699
Published: 1970-01-01
BDU:2015-04310
Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: CRITICAL (10.0)
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References:
- CVE-2012-2372
- CVE-2013-2929
- CVE-2013-4299
- CVE-2013-4579
- CVE-2013-6382
- CVE-2013-7339
- CVE-2014-0055
- CVE-2014-0077
- CVE-2014-0101
- CVE-2014-0131
- CVE-2014-0155
- CVE-2014-1444
- CVE-2014-1445
- CVE-2014-1446
- CVE-2014-1874
- CVE-2014-2309
- CVE-2014-2523
- CVE-2014-2678
- CVE-2014-2851
- CVE-2014-3122
- CVE-2014-3144
- CVE-2014-3145
- CVE-2014-3917
- CVE-2014-4652
- CVE-2014-4653
- CVE-2014-4654
- CVE-2014-4655
- CVE-2014-4656
- CVE-2014-4699
Published: 2014-03-24
Modified: 2025-04-12
Modified: 2025-04-12
CVE-2013-7339
The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.
Severity: MEDIUM (4.7)
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
References:
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2349758acf1874e4c2b93fe41d072336f1a31d0
- http://secunia.com/advisories/59386
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.openwall.com/lists/oss-security/2014/03/20/14
- http://www.securityfocus.com/bid/66351
- https://bugzilla.redhat.com/show_bug.cgi?id=1079214
- https://github.com/torvalds/linux/commit/c2349758acf1874e4c2b93fe41d072336f1a31d0
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2349758acf1874e4c2b93fe41d072336f1a31d0
- http://secunia.com/advisories/59386
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.openwall.com/lists/oss-security/2014/03/20/14
- http://www.securityfocus.com/bid/66351
- https://bugzilla.redhat.com/show_bug.cgi?id=1079214
- https://github.com/torvalds/linux/commit/c2349758acf1874e4c2b93fe41d072336f1a31d0
Published: 2014-01-18
Modified: 2025-04-11
Modified: 2025-04-11
CVE-2014-1438
The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.
Severity: MEDIUM (4.7)
Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
References:
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26bef1318adc1b3a530ecc807ef99346db2aa8b0
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html
- http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:038
- http://www.openwall.com/lists/oss-security/2014/01/14/1
- http://www.securityfocus.com/bid/64781
- http://www.securitytracker.com/id/1029592
- http://www.ubuntu.com/usn/USN-2113-1
- http://www.ubuntu.com/usn/USN-2117-1
- http://www.ubuntu.com/usn/USN-2133-1
- http://www.ubuntu.com/usn/USN-2134-1
- http://www.ubuntu.com/usn/USN-2135-1
- http://www.ubuntu.com/usn/USN-2136-1
- http://www.ubuntu.com/usn/USN-2138-1
- http://www.ubuntu.com/usn/USN-2139-1
- http://www.ubuntu.com/usn/USN-2141-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1052914
- https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0
- https://lkml.org/lkml/2014/1/9/637
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26bef1318adc1b3a530ecc807ef99346db2aa8b0
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html
- http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:038
- http://www.openwall.com/lists/oss-security/2014/01/14/1
- http://www.securityfocus.com/bid/64781
- http://www.securitytracker.com/id/1029592
- http://www.ubuntu.com/usn/USN-2113-1
- http://www.ubuntu.com/usn/USN-2117-1
- http://www.ubuntu.com/usn/USN-2133-1
- http://www.ubuntu.com/usn/USN-2134-1
- http://www.ubuntu.com/usn/USN-2135-1
- http://www.ubuntu.com/usn/USN-2136-1
- http://www.ubuntu.com/usn/USN-2138-1
- http://www.ubuntu.com/usn/USN-2139-1
- http://www.ubuntu.com/usn/USN-2141-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1052914
- https://github.com/torvalds/linux/commit/26bef1318adc1b3a530ecc807ef99346db2aa8b0
- https://lkml.org/lkml/2014/1/9/637
Published: 2014-01-18
Modified: 2025-04-11
Modified: 2025-04-11
CVE-2014-1446
The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.
Severity: LOW (1.9)
Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
References:
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8e3fbf870481eb53b2d3a322d1fc395ad8b367ed
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:038
- http://www.openwall.com/lists/oss-security/2014/01/15/3
- http://www.securityfocus.com/bid/64954
- http://www.ubuntu.com/usn/USN-2113-1
- http://www.ubuntu.com/usn/USN-2117-1
- http://www.ubuntu.com/usn/USN-2128-1
- http://www.ubuntu.com/usn/USN-2129-1
- http://www.ubuntu.com/usn/USN-2133-1
- http://www.ubuntu.com/usn/USN-2134-1
- http://www.ubuntu.com/usn/USN-2135-1
- http://www.ubuntu.com/usn/USN-2136-1
- http://www.ubuntu.com/usn/USN-2138-1
- http://www.ubuntu.com/usn/USN-2139-1
- http://www.ubuntu.com/usn/USN-2141-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1053620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90445
- https://github.com/torvalds/linux/commit/8e3fbf870481eb53b2d3a322d1fc395ad8b367ed
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8e3fbf870481eb53b2d3a322d1fc395ad8b367ed
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:038
- http://www.openwall.com/lists/oss-security/2014/01/15/3
- http://www.securityfocus.com/bid/64954
- http://www.ubuntu.com/usn/USN-2113-1
- http://www.ubuntu.com/usn/USN-2117-1
- http://www.ubuntu.com/usn/USN-2128-1
- http://www.ubuntu.com/usn/USN-2129-1
- http://www.ubuntu.com/usn/USN-2133-1
- http://www.ubuntu.com/usn/USN-2134-1
- http://www.ubuntu.com/usn/USN-2135-1
- http://www.ubuntu.com/usn/USN-2136-1
- http://www.ubuntu.com/usn/USN-2138-1
- http://www.ubuntu.com/usn/USN-2139-1
- http://www.ubuntu.com/usn/USN-2141-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1053620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90445
- https://github.com/torvalds/linux/commit/8e3fbf870481eb53b2d3a322d1fc395ad8b367ed
Published: 2014-02-28
Modified: 2025-04-12
Modified: 2025-04-12
CVE-2014-1690
The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.
Severity: LOW (2.6)
Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
References:
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2690d97ade05c5325cbf7c72b94b90d265659886
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.openwall.com/lists/oss-security/2014/01/28/3
- http://www.ubuntu.com/usn/USN-2137-1
- http://www.ubuntu.com/usn/USN-2140-1
- http://www.ubuntu.com/usn/USN-2158-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1058748
- https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2690d97ade05c5325cbf7c72b94b90d265659886
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
- http://www.openwall.com/lists/oss-security/2014/01/28/3
- http://www.ubuntu.com/usn/USN-2137-1
- http://www.ubuntu.com/usn/USN-2140-1
- http://www.ubuntu.com/usn/USN-2158-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1058748
- https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886