Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-0064

Опубликовано: 25 янв. 2016
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2016-0064: kernel security update (IMPORTANT)

[3.10.0-327.4.5.OL7]

  • Oracle Linux certificates (Alexey Petrenko)

[3.10.0-327.4.5]

  • [security] keys: Fix keyring ref leak in join_session_keyring() (David Howells) [1298931 1298036] {CVE-2016-0728}

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

kernel

3.10.0-327.4.5.el7

kernel-abi-whitelists

3.10.0-327.4.5.el7

kernel-debug

3.10.0-327.4.5.el7

kernel-debug-devel

3.10.0-327.4.5.el7

kernel-devel

3.10.0-327.4.5.el7

kernel-doc

3.10.0-327.4.5.el7

kernel-headers

3.10.0-327.4.5.el7

kernel-tools

3.10.0-327.4.5.el7

kernel-tools-libs

3.10.0-327.4.5.el7

kernel-tools-libs-devel

3.10.0-327.4.5.el7

perf

3.10.0-327.4.5.el7

python-perf

3.10.0-327.4.5.el7

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 9 лет назад

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

redhat
больше 9 лет назад

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

CVSS3: 7.8
nvd
больше 9 лет назад

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

CVSS3: 7.8
debian
больше 9 лет назад

The join_session_keyring function in security/keys/process_keys.c in t ...

suse-cvrf
больше 9 лет назад

Security update for Kernel live patch 10