4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
47.3%
CentOS Errata and Security Advisory CESA-2007:1049
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
A flaw was found in the handling of process death signals. This allowed a
local user to send arbitrary signals to the suid-process executed by that
user. A successful exploitation of this flaw depends on the structure of
the suid-program and its signal handling. (CVE-2007-3848, Important)
A flaw was found in the IPv4 forwarding base. This allowed a local user to
cause a denial of service. (CVE-2007-2172, Important)
A flaw was found where a corrupted executable file could cause cross-region
memory mappings on Itanium systems. This allowed a local user to cause a
denial of service. (CVE-2006-4538, Moderate)
A flaw was found in the stack expansion when using the hugetlb kernel on
PowerPC systems. This allowed a local user to cause a denial of service.
(CVE-2007-3739, Moderate)
A flaw was found in the aacraid SCSI driver. This allowed a local user to
make ioctl calls to the driver that should be restricted to privileged
users. (CVE-2007-4308, Moderate)
As well, these updated packages fix the following bug:
Red Hat Enterprise Linux 3 users are advised to upgrade to these updated
packages, which contain backported patches to resolve these issues.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-December/076641.html
https://lists.centos.org/pipermail/centos-announce/2007-December/076642.html
https://lists.centos.org/pipermail/centos-announce/2007-December/076648.html
https://lists.centos.org/pipermail/centos-announce/2007-December/076649.html
Affected packages:
kernel
kernel-BOOT
kernel-doc
kernel-hugemem
kernel-hugemem-unsupported
kernel-smp
kernel-smp-unsupported
kernel-source
kernel-unsupported
Upstream details at:
https://access.redhat.com/errata/RHSA-2007:1049
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 3 | i586 | kernel | < 2.4.21-53.EL | kernel-2.4.21-53.EL.i586.rpm |
CentOS | 3 | i686 | kernel | < 2.4.21-53.EL | kernel-2.4.21-53.EL.i686.rpm |
CentOS | 3 | i386 | kernel-boot | < 2.4.21-53.EL | kernel-BOOT-2.4.21-53.EL.i386.rpm |
CentOS | 3 | i386 | kernel-doc | < 2.4.21-53.EL | kernel-doc-2.4.21-53.EL.i386.rpm |
CentOS | 3 | i686 | kernel-hugemem | < 2.4.21-53.EL | kernel-hugemem-2.4.21-53.EL.i686.rpm |
CentOS | 3 | i686 | kernel-hugemem-unsupported | < 2.4.21-53.EL | kernel-hugemem-unsupported-2.4.21-53.EL.i686.rpm |
CentOS | 3 | i686 | kernel-smp | < 2.4.21-53.EL | kernel-smp-2.4.21-53.EL.i686.rpm |
CentOS | 3 | i686 | kernel-smp-unsupported | < 2.4.21-53.EL | kernel-smp-unsupported-2.4.21-53.EL.i686.rpm |
CentOS | 3 | i386 | kernel-source | < 2.4.21-53.EL | kernel-source-2.4.21-53.EL.i386.rpm |
CentOS | 3 | i586 | kernel-unsupported | < 2.4.21-53.EL | kernel-unsupported-2.4.21-53.EL.i586.rpm |