ELSA-2014-3016

Опубликовано: 27 мар. 2014

Источник: oracle-oval

Платформа: Oracle Linux 5

Платформа: Oracle Linux 6

Описание

ELSA-2014-3016: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [2.6.32-400.34.4uek]

netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Daniel Borkmann) [Orabug: 18462076] {CVE-2014-2523}
net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable (Daniel Borkmann) [Orabug: 18461091] {CVE-2014-0101}

Обновленные пакеты

Oracle Linux 5

Oracle Linux x86_64

kernel-uek

2.6.32-400.34.4.el5uek

kernel-uek-debug

2.6.32-400.34.4.el5uek

kernel-uek-debug-devel

2.6.32-400.34.4.el5uek

kernel-uek-devel

2.6.32-400.34.4.el5uek

kernel-uek-doc

2.6.32-400.34.4.el5uek

kernel-uek-firmware

2.6.32-400.34.4.el5uek

kernel-uek-headers

2.6.32-400.34.4.el5uek

mlnx_en-2.6.32-400.34.4.el5uek

1.5.7-2

mlnx_en-2.6.32-400.34.4.el5uekdebug

1.5.7-2

ofa-2.6.32-400.34.4.el5uek

1.5.1-4.0.58

ofa-2.6.32-400.34.4.el5uekdebug

1.5.1-4.0.58

Oracle Linux i386

kernel-uek

2.6.32-400.34.4.el5uek

kernel-uek-debug

2.6.32-400.34.4.el5uek

kernel-uek-debug-devel

2.6.32-400.34.4.el5uek

kernel-uek-devel

2.6.32-400.34.4.el5uek

kernel-uek-doc

2.6.32-400.34.4.el5uek

kernel-uek-firmware

2.6.32-400.34.4.el5uek

kernel-uek-headers

2.6.32-400.34.4.el5uek

mlnx_en-2.6.32-400.34.4.el5uek

1.5.7-2

mlnx_en-2.6.32-400.34.4.el5uekdebug

1.5.7-2

ofa-2.6.32-400.34.4.el5uek

1.5.1-4.0.58

ofa-2.6.32-400.34.4.el5uekdebug

1.5.1-4.0.58

Oracle Linux 6

Oracle Linux x86_64

kernel-uek

2.6.32-400.34.4.el6uek

kernel-uek-debug

2.6.32-400.34.4.el6uek

kernel-uek-debug-devel

2.6.32-400.34.4.el6uek

kernel-uek-devel

2.6.32-400.34.4.el6uek

kernel-uek-doc

2.6.32-400.34.4.el6uek

kernel-uek-firmware

2.6.32-400.34.4.el6uek

kernel-uek-headers

2.6.32-400.34.4.el6uek

mlnx_en-2.6.32-400.34.4.el6uek

1.5.7-0.1

mlnx_en-2.6.32-400.34.4.el6uekdebug

1.5.7-0.1

ofa-2.6.32-400.34.4.el6uek

1.5.1-4.0.58

ofa-2.6.32-400.34.4.el6uekdebug

1.5.1-4.0.58

Oracle Linux i686

kernel-uek

2.6.32-400.34.4.el6uek

kernel-uek-debug

2.6.32-400.34.4.el6uek

kernel-uek-debug-devel

2.6.32-400.34.4.el6uek

kernel-uek-devel

2.6.32-400.34.4.el6uek

kernel-uek-doc

2.6.32-400.34.4.el6uek

kernel-uek-firmware

2.6.32-400.34.4.el6uek

kernel-uek-headers

2.6.32-400.34.4.el6uek

mlnx_en-2.6.32-400.34.4.el6uek

1.5.7-0.1

mlnx_en-2.6.32-400.34.4.el6uekdebug

1.5.7-0.1

ofa-2.6.32-400.34.4.el6uek

1.5.1-4.0.58

ofa-2.6.32-400.34.4.el6uekdebug

1.5.1-4.0.58

Связанные CVE

CVE-2014-0101

CVE-2014-2523

Ссылки на источники

Связанные уязвимости

ELSA-2014-3015

oracle-oval

больше 12 лет назад

ELSA-2014-3015: unbreakable enterprise kernel security update (IMPORTANT)

ELSA-2014-3014

oracle-oval

больше 12 лет назад

ELSA-2014-3014: unbreakable enterprise kernel security update (IMPORTANT)

ALT-PU-2014-1606

altlinux

больше 12 лет назад

ALT-PU-2014-1606: package `kernel-image-el-def` update to version 2.6.32-alt22

CVE-2014-0101

ubuntu

больше 12 лет назад

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

CVE-2014-0101

redhat

больше 12 лет назад