Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2019-4808

Опубликовано: 01 окт. 2019
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2019-4808: Unbreakable Enterprise kernel security update (IMPORTANT)

[4.1.12-124.32.1]

  • NFSv4: Don't try to reclaim unused state owners (Trond Myklebust) [Orabug: 30124013]
  • x86/microcode: Update late microcode in parallel (Ashok Raj) [Orabug: 30302412]
  • floppy: fix out-of-bounds read in copy_buffer (Denis Efremov) [Orabug: 30318219] {CVE-2019-14283}
  • xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora) [Orabug: 30351050]

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

kernel-uek

4.1.12-124.32.1.el6uek

kernel-uek-debug

4.1.12-124.32.1.el6uek

kernel-uek-debug-devel

4.1.12-124.32.1.el6uek

kernel-uek-devel

4.1.12-124.32.1.el6uek

kernel-uek-doc

4.1.12-124.32.1.el6uek

kernel-uek-firmware

4.1.12-124.32.1.el6uek

Oracle Linux 7

Oracle Linux x86_64

kernel-uek

4.1.12-124.32.1.el7uek

kernel-uek-debug

4.1.12-124.32.1.el7uek

kernel-uek-debug-devel

4.1.12-124.32.1.el7uek

kernel-uek-devel

4.1.12-124.32.1.el7uek

kernel-uek-doc

4.1.12-124.32.1.el7uek

kernel-uek-firmware

4.1.12-124.32.1.el7uek

Связанные уязвимости

oracle-oval
больше 5 лет назад

ELSA-2019-4810: Unbreakable Enterprise kernel security update (IMPORTANT)

oracle-oval
больше 5 лет назад

ELSA-2019-4820: Unbreakable Enterprise kernel security update (IMPORTANT)

CVSS3: 6.8
ubuntu
почти 6 лет назад

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.

CVSS3: 5.6
redhat
почти 6 лет назад

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.

CVSS3: 6.8
nvd
почти 6 лет назад

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.