Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2016-1862

Критический

ALT-PU-2016-1862: package kernel-image-un-def update to version 4.7.1-alt1

Источник
errata.altlinux.org
Дата публикации
18.08.2016
Дата обновления
18.08.2016
Устраненные уязвимости
14

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kernel-image-un-def to version 4.7.1-alt1.

Устраненные уязвимости14

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 10 лет назад

The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28770164 and Qualcomm internal bug CR568717.

CVSS3: 5.5
nvd
больше 10 лет назад

The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28770164 and Qualcomm internal bug CR568717.

CVSS3: 5.5
debian
больше 10 лет назад

The snd_compr_tstamp function in sound/core/compress_offload.c in the ...

CVSS3: 9.8
altlinux
больше 9 лет назад

ALT-PU-2017-1330: package `kernel-image-std-def` update to version 4.9.16-alt1

CVSS3: 5.5
github
больше 4 лет назад

The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28770164 and Qualcomm internal bug CR568717.