ALT-PU-2018-1407-1

Обновление пакета kernel-image-std-def в ветке sisyphus

Версия4.9.87-alt1
Задание#201703
Опубликовано2018-03-12
Макс. серьёзностьMEDIUM
Серьёзность:

Закрытые проблемы (2)

CVE-2011-1161
NONE

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-1160, CVE-2011-1162. Reason: This candidate was withdrawn by its CNA. Further investigation showed that only two candidates, CVE-2011-1160 and CVE-2011-1162, were needed for the set of security issues in question. Notes: none

Опубликовано: 2011-12-12Изменено: 2023-11-07
CVE-2018-5803
MEDIUM5.5

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

Опубликовано: 2018-06-12Изменено: 2024-11-21
CVSS 2.0СРЕДНЯЯ 4.9
CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSS 3.xСРЕДНЯЯ 5.5
CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Ссылки