Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-3655

Опубликовано: 21 дек. 2016
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2016-3655: Unbreakable Enterprise kernel security update (IMPORTANT)

kernel-uek [4.1.12-61.1.23]

  • net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298601] {CVE-2016-7117}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

dtrace-modules-4.1.12-61.1.23.el6uek

0.5.3-2.el6

kernel-uek

4.1.12-61.1.23.el6uek

kernel-uek-debug

4.1.12-61.1.23.el6uek

kernel-uek-debug-devel

4.1.12-61.1.23.el6uek

kernel-uek-devel

4.1.12-61.1.23.el6uek

kernel-uek-doc

4.1.12-61.1.23.el6uek

kernel-uek-firmware

4.1.12-61.1.23.el6uek

Oracle Linux 7

Oracle Linux x86_64

dtrace-modules-4.1.12-61.1.23.el7uek

0.5.3-2.el7

kernel-uek

4.1.12-61.1.23.el7uek

kernel-uek-debug

4.1.12-61.1.23.el7uek

kernel-uek-debug-devel

4.1.12-61.1.23.el7uek

kernel-uek-devel

4.1.12-61.1.23.el7uek

kernel-uek-doc

4.1.12-61.1.23.el7uek

kernel-uek-firmware

4.1.12-61.1.23.el7uek

Связанные CVE

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.

CVSS3: 8.1
redhat
больше 9 лет назад

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.

CVSS3: 9.8
nvd
больше 8 лет назад

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.

CVSS3: 9.8
debian
больше 8 лет назад

Use-after-free vulnerability in the __sys_recvmmsg function in net/soc ...

CVSS3: 9.8
github
около 3 лет назад

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.