Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2017-2679-1

Опубликовано: 13 сент. 2017
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2017-2679-1: kernel security update (IMPORTANT)

[3.10.0-693.2.2.0.1.el7.OL7]

  • [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug 22552377]
  • Oracle Linux certificates (Alexey Petrenko)
  • Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petre nko@oracle.com)
  • Update x509.genkey [bug 24817676]

[3.10.0-693.2.2.el7]

  • [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

kernel

3.10.0-693.2.2.0.1.el7

kernel-abi-whitelists

3.10.0-693.2.2.0.1.el7

kernel-debug

3.10.0-693.2.2.0.1.el7

kernel-debug-devel

3.10.0-693.2.2.0.1.el7

kernel-devel

3.10.0-693.2.2.0.1.el7

kernel-doc

3.10.0-693.2.2.0.1.el7

kernel-headers

3.10.0-693.2.2.0.1.el7

kernel-tools

3.10.0-693.2.2.0.1.el7

kernel-tools-libs

3.10.0-693.2.2.0.1.el7

kernel-tools-libs-devel

3.10.0-693.2.2.0.1.el7

perf

3.10.0-693.2.2.0.1.el7

python-perf

3.10.0-693.2.2.0.1.el7

Связанные CVE

Связанные уязвимости

CVSS3: 8
ubuntu
около 8 лет назад

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

CVSS3: 7.5
redhat
около 8 лет назад

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

CVSS3: 8
nvd
около 8 лет назад

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

CVSS3: 8
debian
около 8 лет назад

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at th ...

suse-cvrf
около 8 лет назад

Security update for Linux Kernel Live Patch 1 for SLE 12 SP3