Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-3636

Опубликовано: 03 нояб. 2016
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2016-3636: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [3.8.13-118.14.1]

  • ecryptfs: forbid opening files without mmap handler (Jann Horn) [Orabug: 24971919] {CVE-2016-1583}
  • RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar) [Orabug: 24395795]

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-3.8.13-118.14.1.el6uek

0.4.5-3.el6

kernel-uek

3.8.13-118.14.1.el6uek

kernel-uek-debug

3.8.13-118.14.1.el6uek

kernel-uek-debug-devel

3.8.13-118.14.1.el6uek

kernel-uek-devel

3.8.13-118.14.1.el6uek

kernel-uek-doc

3.8.13-118.14.1.el6uek

kernel-uek-firmware

3.8.13-118.14.1.el6uek

Oracle Linux 7

Oracle Linux x86_64

dtrace-modules-3.8.13-118.14.1.el7uek

0.4.5-3.el7

kernel-uek

3.8.13-118.14.1.el7uek

kernel-uek-debug

3.8.13-118.14.1.el7uek

kernel-uek-debug-devel

3.8.13-118.14.1.el7uek

kernel-uek-devel

3.8.13-118.14.1.el7uek

kernel-uek-doc

3.8.13-118.14.1.el7uek

kernel-uek-firmware

3.8.13-118.14.1.el7uek

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 9 лет назад

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS3: 8.1
redhat
около 9 лет назад

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS3: 7.8
nvd
почти 9 лет назад

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS3: 7.8
debian
почти 9 лет назад

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the ...

suse-cvrf
около 9 лет назад

Security update for the Linux Kernel