Все бюллетени/c7/ALT-PU-2013-1012-1
ALT-PU-2013-1012-1

Обновление пакета kernel-image-un-def в ветке c7

Версия3.11.6-alt1
Задание#106759
Опубликовано2013-10-21
Макс. серьёзностьMEDIUM
Серьёзность:

Закрытые проблемы (5)

BDU:2014-00092
MEDIUM5.8

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Опубликовано: 2016-07-05Изменено: 2016-11-28
CVSS 2.0СРЕДНЯЯ 5.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N
Ссылки
CVE-2013-4270
LOW3.6

The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.

Опубликовано: 2013-12-09Изменено: 2026-04-29
CVSS 2.0НИЗКАЯ 3.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:N
Ссылки
CVE-2013-4345
MEDIUM5.8

Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Опубликовано: 2013-10-10Изменено: 2026-04-29
CVSS 2.0СРЕДНЯЯ 5.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N
Ссылки
CVE-2013-4387
MEDIUM6.1

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

Опубликовано: 2013-10-10Изменено: 2026-04-29
CVSS 2.0СРЕДНЯЯ 6.1
CVSS:2.0/AV:A/AC:L/Au:N/C:N/I:N/A:C
Ссылки
CVE-2013-6431
MEDIUM4.7

The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call.

Опубликовано: 2013-12-09Изменено: 2026-04-29
CVSS 2.0СРЕДНЯЯ 4.7
CVSS:2.0/AV:L/AC:M/Au:N/C:N/I:N/A:C
Ссылки