ELSA-2017-2681

Опубликовано: 13 сент. 2017

Источник: oracle-oval

Платформа: Oracle Linux 6

Описание

ELSA-2017-2681: kernel security and bug fix update (IMPORTANT)

[2.6.32-696.10.2.OL6]

Update genkey [bug 25599697]

[2.6.32-696.10.2]

[net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

kernel

2.6.32-696.10.2.el6

kernel-abi-whitelists

2.6.32-696.10.2.el6

kernel-debug

2.6.32-696.10.2.el6

kernel-debug-devel

2.6.32-696.10.2.el6

kernel-devel

2.6.32-696.10.2.el6

kernel-doc

2.6.32-696.10.2.el6

kernel-firmware

2.6.32-696.10.2.el6

kernel-headers

2.6.32-696.10.2.el6

perf

2.6.32-696.10.2.el6

python-perf

2.6.32-696.10.2.el6

Oracle Linux i686

kernel

2.6.32-696.10.2.el6

kernel-abi-whitelists

2.6.32-696.10.2.el6

kernel-debug

2.6.32-696.10.2.el6

kernel-debug-devel

2.6.32-696.10.2.el6

kernel-devel

2.6.32-696.10.2.el6

kernel-doc

2.6.32-696.10.2.el6

kernel-firmware

2.6.32-696.10.2.el6

kernel-headers

2.6.32-696.10.2.el6

perf

2.6.32-696.10.2.el6

python-perf

2.6.32-696.10.2.el6

Связанные CVE

CVE-2017-1000251

Ссылки на источники

Связанные уязвимости

CVE-2017-1000251

CVSS3: 8

ubuntu

около 8 лет назад

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.