Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2021-9369

Опубликовано: 22 июл. 2021
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2021-9369: Unbreakable Enterprise kernel security update (IMPORTANT)

[4.1.12-124.52.5]

  • seq_file: disallow extremely large seq buffer allocations (Eric Sandeen) [Orabug: 33135634] {CVE-2021-33909}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

kernel-uek

4.1.12-124.52.5.el6uek

kernel-uek-debug

4.1.12-124.52.5.el6uek

kernel-uek-debug-devel

4.1.12-124.52.5.el6uek

kernel-uek-devel

4.1.12-124.52.5.el6uek

kernel-uek-doc

4.1.12-124.52.5.el6uek

kernel-uek-firmware

4.1.12-124.52.5.el6uek

Oracle Linux 7

Oracle Linux x86_64

kernel-uek

4.1.12-124.52.5.el7uek

kernel-uek-debug

4.1.12-124.52.5.el7uek

kernel-uek-debug-devel

4.1.12-124.52.5.el7uek

kernel-uek-devel

4.1.12-124.52.5.el7uek

kernel-uek-doc

4.1.12-124.52.5.el7uek

kernel-uek-firmware

4.1.12-124.52.5.el7uek

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 4 года назад

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

CVSS3: 7.8
redhat
почти 4 года назад

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

CVSS3: 7.8
nvd
почти 4 года назад

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

CVSS3: 7.8
msrc
почти 4 года назад

Описание отсутствует

CVSS3: 7.8
debian
почти 4 года назад

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 do ...