CRITICAL10.0
Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному нарушителю нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
ALT-PU-2014-2017-1Package update kernel-image-un-def in branch c7
Severity:
Closed issues (9)
CRITICAL10.0
Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному нарушителю нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CHIGH7.2
Уязвимости операционной системы Ubuntu, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:CCRITICAL10.0
Уязвимости операционной системы Ubuntu, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CHIGH7.2
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a crafted application that makes a ptrace system call.
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:CReferences
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dab6cf55f81a6e16b8147aed9a843e1691dcd318
- http://secunia.com/advisories/59790
- http://secunia.com/advisories/60351
- http://www.debian.org/security/2014/dsa-2992
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8
- http://www.osvdb.org/109546
- http://www.securityfocus.com/bid/68940
- http://www.securitytracker.com/id/1030683
- https://bugzilla.redhat.com/show_bug.cgi?id=1114089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95069
- https://github.com/torvalds/linux/commit/dab6cf55f81a6e16b8147aed9a843e1691dcd318
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dab6cf55f81a6e16b8147aed9a843e1691dcd318
- http://secunia.com/advisories/59790
- http://secunia.com/advisories/60351
- http://www.debian.org/security/2014/dsa-2992
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8
- http://www.osvdb.org/109546
- http://www.securityfocus.com/bid/68940
- http://www.securitytracker.com/id/1030683
- https://bugzilla.redhat.com/show_bug.cgi?id=1114089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95069
- https://github.com/torvalds/linux/commit/dab6cf55f81a6e16b8147aed9a843e1691dcd318
MEDIUM6.9
The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
CVSS 2.0MEDIUM 6.9
CVSS:2.0/AV:L/AC:M/Au:N/C:C/I:C/A:CReferences
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
- http://linux.oracle.com/errata/ELSA-2014-0924.html
- http://linux.oracle.com/errata/ELSA-2014-3047.html
- http://linux.oracle.com/errata/ELSA-2014-3048.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
- http://openwall.com/lists/oss-security/2014/07/17/1
- http://osvdb.org/show/osvdb/109277
- http://rhn.redhat.com/errata/RHSA-2014-1025.html
- http://secunia.com/advisories/59790
- http://secunia.com/advisories/60011
- http://secunia.com/advisories/60071
- http://secunia.com/advisories/60220
- http://secunia.com/advisories/60380
- http://secunia.com/advisories/60393
- http://www.debian.org/security/2014/dsa-2992
- http://www.exploit-db.com/exploits/36267
- http://www.securitytracker.com/id/1030610
- https://bugzilla.redhat.com/show_bug.cgi?id=1119458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94665
- https://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
- http://linux.oracle.com/errata/ELSA-2014-0924.html
- http://linux.oracle.com/errata/ELSA-2014-3047.html
- http://linux.oracle.com/errata/ELSA-2014-3048.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
- http://openwall.com/lists/oss-security/2014/07/17/1
- http://osvdb.org/show/osvdb/109277
- http://rhn.redhat.com/errata/RHSA-2014-1025.html
- http://secunia.com/advisories/59790
- http://secunia.com/advisories/60011
- http://secunia.com/advisories/60071
- http://secunia.com/advisories/60220
- http://secunia.com/advisories/60380
- http://secunia.com/advisories/60393
- http://www.debian.org/security/2014/dsa-2992
- http://www.exploit-db.com/exploits/36267
- http://www.securitytracker.com/id/1030610
- https://bugzilla.redhat.com/show_bug.cgi?id=1119458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94665
- https://github.com/torvalds/linux/commit/3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
MEDIUM6.2
The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.
CVSS 2.0MEDIUM 6.2
CVSS:2.0/AV:L/AC:H/Au:N/C:C/I:C/A:CReferences
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=295dc39d941dc2ae53d5c170365af4c9d5c16212
- http://rhn.redhat.com/errata/RHSA-2015-0062.html
- http://secunia.com/advisories/60353
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8
- http://www.openwall.com/lists/oss-security/2014/07/24/2
- http://www.securityfocus.com/bid/68862
- https://bugzilla.redhat.com/show_bug.cgi?id=1122472
- https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=295dc39d941dc2ae53d5c170365af4c9d5c16212
- http://rhn.redhat.com/errata/RHSA-2015-0062.html
- http://secunia.com/advisories/60353
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.8
- http://www.openwall.com/lists/oss-security/2014/07/24/2
- http://www.securityfocus.com/bid/68862
- https://bugzilla.redhat.com/show_bug.cgi?id=1122472
- https://github.com/torvalds/linux/commit/295dc39d941dc2ae53d5c170365af4c9d5c16212
HIGH7.1
The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.
CVSS 2.0HIGH 7.1
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:CReferences
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://rhn.redhat.com/errata/RHSA-2014-1083.html
- http://rhn.redhat.com/errata/RHSA-2014-1668.html
- http://rhn.redhat.com/errata/RHSA-2014-1763.html
- http://secunia.com/advisories/59777
- http://secunia.com/advisories/60430
- http://secunia.com/advisories/60545
- http://secunia.com/advisories/60564
- http://secunia.com/advisories/60744
- http://secunia.com/advisories/62563
- http://www.openwall.com/lists/oss-security/2014/07/26/1
- http://www.securityfocus.com/bid/68881
- http://www.securitytracker.com/id/1030681
- http://www.ubuntu.com/usn/USN-2334-1
- http://www.ubuntu.com/usn/USN-2335-1
- http://www.ubuntu.com/usn/USN-2358-1
- http://www.ubuntu.com/usn/USN-2359-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1122982
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95134
- https://github.com/torvalds/linux/commit/1be9a950c646c9092fb3618197f7b6bfb50e82aa
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1be9a950c646c9092fb3618197f7b6bfb50e82aa
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html
- http://rhn.redhat.com/errata/RHSA-2014-1083.html
- http://rhn.redhat.com/errata/RHSA-2014-1668.html
- http://rhn.redhat.com/errata/RHSA-2014-1763.html
- http://secunia.com/advisories/59777
- http://secunia.com/advisories/60430
- http://secunia.com/advisories/60545
- http://secunia.com/advisories/60564
- http://secunia.com/advisories/60744
- http://secunia.com/advisories/62563
- http://www.openwall.com/lists/oss-security/2014/07/26/1
- http://www.securityfocus.com/bid/68881
- http://www.securitytracker.com/id/1030681
- http://www.ubuntu.com/usn/USN-2334-1
- http://www.ubuntu.com/usn/USN-2335-1
- http://www.ubuntu.com/usn/USN-2358-1
- http://www.ubuntu.com/usn/USN-2359-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1122982
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95134
- https://github.com/torvalds/linux/commit/1be9a950c646c9092fb3618197f7b6bfb50e82aa
HIGH7.2
The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:CReferences
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0207652cbe27d1f962050737848e5ad4671958
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0102.html
- http://rhn.redhat.com/errata/RHSA-2015-0164.html
- http://rhn.redhat.com/errata/RHSA-2015-0674.html
- http://rhn.redhat.com/errata/RHSA-2015-0694.html
- http://www.debian.org/security/2015/dsa-3170
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.osvdb.org/117810
- http://www.securityfocus.com/bid/72347
- http://www.ubuntu.com/usn/USN-2541-1
- http://www.ubuntu.com/usn/USN-2542-1
- http://www.ubuntu.com/usn/USN-2543-1
- http://www.ubuntu.com/usn/USN-2544-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1163792
- https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958
- https://www.exploit-db.com/exploits/36743/
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8d0207652cbe27d1f962050737848e5ad4671958
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0102.html
- http://rhn.redhat.com/errata/RHSA-2015-0164.html
- http://rhn.redhat.com/errata/RHSA-2015-0674.html
- http://rhn.redhat.com/errata/RHSA-2015-0694.html
- http://www.debian.org/security/2015/dsa-3170
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.osvdb.org/117810
- http://www.securityfocus.com/bid/72347
- http://www.ubuntu.com/usn/USN-2541-1
- http://www.ubuntu.com/usn/USN-2542-1
- http://www.ubuntu.com/usn/USN-2543-1
- http://www.ubuntu.com/usn/USN-2544-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1163792
- https://github.com/torvalds/linux/commit/8d0207652cbe27d1f962050737848e5ad4671958
- https://www.exploit-db.com/exploits/36743/