exploitDog

ALT-PU-2016-2157

Высокий

ALT-PU-2016-2157: package kernel-image-std-def update to version 4.4.27-alt1

Источник

errata.altlinux.org

Дата публикации

23.10.2016

Дата обновления

23.10.2016

Устраненные уязвимости

1

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kernel-image-std-def to version 4.4.27-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2016-2157 https://errata.altlinux.org/ALT-PU-2016-2157

Связанные уязвимости

CVE-2016-7425

CVSS3: 7.8

ubuntu

около 10 лет назад

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.

CVE-2016-7425

CVSS3: 5.3

redhat

около 10 лет назад

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.

CVE-2016-7425

CVSS3: 7.8

nvd

около 10 лет назад

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.

CVE-2016-7425

CVSS3: 7.8

debian

около 10 лет назад

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba ...

GHSA-268m-95p3-rgg5

CVSS3: 7.8

github

больше 4 лет назад

The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.