Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-3559

Опубликовано: 16 мая 2016
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2016-3559: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [4.1.12-37.3.1]

  • KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells) [Orabug: 23279022] {CVE-2016-0758}
  • uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers (Todd Vierling) [Orabug: 23270829]
  • unix: properly account for FDs passed over unix sockets (willy tarreau) [Orabug: 23262277] {CVE-2013-4312} {CVE-2013-4312}
  • sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss) [Orabug: 23222731] {CVE-2015-8767}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-4.1.12-37.3.1.el6uek

0.5.2-1.el6

kernel-uek

4.1.12-37.3.1.el6uek

kernel-uek-debug

4.1.12-37.3.1.el6uek

kernel-uek-debug-devel

4.1.12-37.3.1.el6uek

kernel-uek-devel

4.1.12-37.3.1.el6uek

kernel-uek-doc

4.1.12-37.3.1.el6uek

kernel-uek-firmware

4.1.12-37.3.1.el6uek

Oracle Linux 7

Oracle Linux x86_64

dtrace-modules-4.1.12-37.3.1.el7uek

0.5.2-1.el7

kernel-uek

4.1.12-37.3.1.el7uek

kernel-uek-debug

4.1.12-37.3.1.el7uek

kernel-uek-debug-devel

4.1.12-37.3.1.el7uek

kernel-uek-devel

4.1.12-37.3.1.el7uek

kernel-uek-doc

4.1.12-37.3.1.el7uek

kernel-uek-firmware

4.1.12-37.3.1.el7uek

Связанные CVE

Связанные уязвимости

oracle-oval
около 9 лет назад

ELSA-2016-3565: Unbreakable Enterprise kernel security update (IMPORTANT)

CVSS3: 6.2
ubuntu
больше 9 лет назад

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.

redhat
больше 9 лет назад

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.

CVSS3: 6.2
nvd
больше 9 лет назад

The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.

CVSS3: 6.2
debian
больше 9 лет назад

The Linux kernel before 4.4.1 allows local users to bypass file-descri ...