Описание
ELSA-2017-3580: Unbreakable Enterprise kernel security update (IMPORTANT)
kernel-uek [3.8.13-118.18.4]
- net/packet: fix overflow in check for tp_reserve (Andrey Konovalov) [Orabug: 26143552] {CVE-2017-7308}
- net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov) [Orabug: 26143552] {CVE-2017-7308}
- net/packet: fix overflow in check for priv area size (Andrey Konovalov) [Orabug: 26143552] {CVE-2017-7308}
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
dtrace-modules-3.8.13-118.18.4.el6uek
0.4.5-3.el6
kernel-uek
3.8.13-118.18.4.el6uek
kernel-uek-debug
3.8.13-118.18.4.el6uek
kernel-uek-debug-devel
3.8.13-118.18.4.el6uek
kernel-uek-devel
3.8.13-118.18.4.el6uek
kernel-uek-doc
3.8.13-118.18.4.el6uek
kernel-uek-firmware
3.8.13-118.18.4.el6uek
Oracle Linux 7
Oracle Linux x86_64
dtrace-modules-3.8.13-118.18.4.el7uek
0.4.5-3.el7
kernel-uek
3.8.13-118.18.4.el7uek
kernel-uek-debug
3.8.13-118.18.4.el7uek
kernel-uek-debug-devel
3.8.13-118.18.4.el7uek
kernel-uek-devel
3.8.13-118.18.4.el7uek
kernel-uek-doc
3.8.13-118.18.4.el7uek
kernel-uek-firmware
3.8.13-118.18.4.el7uek
Связанные CVE
Связанные уязвимости
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
The packet_set_ring function in net/packet/af_packet.c in the Linux ke ...
Security update for Linux Kernel Live Patch 19 for SLE 12