ELSA-2013-2583

Опубликовано: 28 нояб. 2013

Источник: oracle-oval

Платформа: Oracle Linux 6

Описание

ELSA-2013-2583: Unbreakable Enterprise Kernel security update (IMPORTANT)

[3.8.13-16.2.2.el6uek]

HID: pantherlord: validate output report details (Kees Cook) [Orabug: 17841973] {CVE-2013-2892}
HID: zeroplus: validate output report details (Kees Cook) [Orabug: 17841968] {CVE-2013-2889}
HID: provide a helper for validating hid reports (Kees Cook) [Orabug: 17841968] {CVE-2013-2889}
KVM: Fix iommu map/unmap to handle memory slot moves (Alex Williamson) [Orabug: 17841960] {CVE-2013-4592}
ansi_cprng: Fix off by one error in non-block size request (Jerry Snitselaar) [Orabug: 17837997] {CVE-2013-4345}
HID: validate HID report id size (Kees Cook) [Orabug: 17841940] {CVE-2013-2888}
ipv6: remove max_addresses check from ipv6_create_tempaddr (Hannes Frederic Sowa) [Orabug: 17841911] {CVE-2013-0343}
ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Hannes Frederic Sowa) [Orabug: 17841928] {CVE-2013-4387}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-3.8.13-16.2.2.el6uek

0.4.1-3.el6

dtrace-modules-3.8.13-16.2.2.el6uek-headers

0.4.1-3.el6

dtrace-modules-3.8.13-16.2.2.el6uek-provider-headers

0.4.1-3.el6

kernel-uek

3.8.13-16.2.2.el6uek

kernel-uek-debug

3.8.13-16.2.2.el6uek

kernel-uek-debug-devel

3.8.13-16.2.2.el6uek

kernel-uek-devel

3.8.13-16.2.2.el6uek

kernel-uek-doc

3.8.13-16.2.2.el6uek

kernel-uek-firmware

3.8.13-16.2.2.el6uek

kernel-uek-headers

3.8.13-16.2.2.el6uek

Связанные CVE

Ссылки на источники

Связанные уязвимости

ELSA-2013-2584

oracle-oval

больше 11 лет назад

ELSA-2013-2584: Unbreakable Enterprise Kernel security update (IMPORTANT)

ELSA-2013-1645

oracle-oval

больше 11 лет назад

ELSA-2013-1645: Oracle Linux 6 kernel update (IMPORTANT)

ELSA-2013-2585

oracle-oval

больше 11 лет назад

ELSA-2013-2585: Unbreakable Enterprise Kernel security update (IMPORTANT)

CVE-2013-0343

ubuntu

больше 12 лет назад

The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.

CVE-2013-0343

redhat

больше 12 лет назад