Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2018:3651
HistoryDec 13, 2018 - 8:56 p.m.

bpftool, kernel, perf, python security update

2018-12-1320:56:53
CentOS Project
lists.centos.org
419

7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

8.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON

CentOS Errata and Security Advisory CESA-2018:3651

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target (CVE-2018-14633)

  • kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service (CVE-2018-14646)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Vincent Pelletier for reporting CVE-2018-14633 and Christian Brauner for reporting CVE-2018-14646.

Bug Fix(es):

These updated kernel packages include also numerous bug fixes. Space precludes documenting all of the bug fixes in this advisory. See the descriptions in the related Knowledge Article: https://access.redhat.com/articles/3714371

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2018-December/085294.html

Affected packages:
bpftool
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-headers
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python-perf

Upstream details at:
https://access.redhat.com/errata/RHSA-2018:3651

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64bpftool< 3.10.0-957.1.3.el7bpftool-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel< 3.10.0-957.1.3.el7kernel-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-debug< 3.10.0-957.1.3.el7kernel-debug-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-debug-devel< 3.10.0-957.1.3.el7kernel-debug-devel-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-devel< 3.10.0-957.1.3.el7kernel-devel-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-headers< 3.10.0-957.1.3.el7kernel-headers-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-tools< 3.10.0-957.1.3.el7kernel-tools-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-tools-libs< 3.10.0-957.1.3.el7kernel-tools-libs-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64kernel-tools-libs-devel< 3.10.0-957.1.3.el7kernel-tools-libs-devel-3.10.0-957.1.3.el7.x86_64.rpm
CentOS7x86_64perf< 3.10.0-957.1.3.el7perf-3.10.0-957.1.3.el7.x86_64.rpm
Rows per page:
1-10 of 111

Related

oraclelinux 4
nessus 56
redhat 4
openvas 63
veracode 2
redhatcve 2
prion 2
ubuntucve 2
debiancve 2
virtuozzo 2
cve 2
fedora 25
altlinux 1
f5 1
ibm 5
ubuntu 8
amazon 2
photon 2
mageia 3
cloudfoundry 2
suse 2
debian 3
osv 3
slackware 1
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2018-11-27 00:00:00
kernel security, bug fix, and enhancement update
2019-01-29 00:00:00
Unbreakable Enterprise kernel security update
2019-06-04 00:00:00
nessus
nessus
RHEL 7 : kernel (RHSA-2018:3651)
2018-11-27 00:00:00
RHEL 7 : kernel-rt (RHSA-2018:3666)
2018-11-27 00:00:00
Scientific Linux Security Update : kernel on SL7.x x86_64 (20181127)
2018-11-28 00:00:00
redhat
redhat
(RHSA-2018:3666) Moderate: kernel-rt security and bug fix update
2018-11-26 23:01:03
(RHSA-2018:3651) Moderate: kernel security, bug fix, and enhancement update
2018-11-26 23:00:59
(RHSA-2018:3843) Moderate: kernel security and bug fix update
2018-12-18 14:07:12
openvas
openvas
CentOS Update for kernel CESA-2018:3651 centos7
2018-12-18 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1232)
2020-01-23 00:00:00
Fedora Update for kernel-tools FEDORA-2018-0edb45d9db
2018-10-02 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:27:25
Denial Of Service (DoS)
2019-01-15 09:26:45
redhatcve
redhatcve
CVE-2018-14646
2020-01-07 03:32:16
CVE-2018-14633
2022-01-13 06:33:33
prion
prion
Null pointer dereference
2018-11-26 19:29:00
Stack overflow
2018-09-25 00:29:00
ubuntucve
ubuntucve
CVE-2018-14646
2018-11-26 00:00:00
CVE-2018-14633
2018-09-24 00:00:00
debiancve
debiancve
CVE-2018-14646
2018-11-26 19:29:00
CVE-2018-14633
2018-09-25 00:29:00
virtuozzo
virtuozzo
Kernel security update: Virtuozzo ReadyKernel patch 67.0 for Virtuozzo 7.0.8 and 7.0.8 HF1
2018-11-30 00:00:00
Product update: Virtuozzo 7.0 Update 9 (7.0.9-534)
2019-03-05 00:00:00
cve
cve
CVE-2018-14646
2018-11-26 19:29:00
CVE-2018-14633
2018-09-25 00:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: kernel-headers-4.18.10-300.fc29
2018-09-30 23:28:22
[SECURITY] Fedora 29 Update: kernel-4.18.10-300.fc29
2018-09-30 23:28:21
[SECURITY] Fedora 29 Update: kernel-tools-4.18.10-300.fc29
2018-09-30 23:28:22
altlinux
altlinux
Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.159-alt0.M80P.1
2018-10-09 00:00:00
f5
f5
K73540515 : Linux kernel vulnerability CVE-2018-14633
2018-10-15 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in kernel affects Power Hardware Management Console (CVE-2018-14633)
2021-09-22 23:05:38
Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities
2019-06-27 08:40:01
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u
2018-12-05 22:20:01
ubuntu
ubuntu
Linux kernel vulnerabilities
2018-10-02 00:00:00
Linux kernel (Trusty HWE) vulnerabilities
2018-10-01 00:00:00
Linux kernel vulnerabilities
2018-10-01 00:00:00
amazon
amazon
Important: kernel
2018-10-08 22:12:00
Important: kernel
2018-10-03 02:57:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0109
2018-11-20 00:00:00
Important Photon OS Security Update - PHSA-2018-0190
2018-09-25 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2018-10-27 12:45:46
Updated kernel-tmb packages fix security vulnerabilities
2018-10-27 12:45:46
Updated kernel-linus packages fix security vulnerabilities
2018-10-27 12:45:46
cloudfoundry
cloudfoundry
USN-3777-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2018-10-09 00:00:00
USN-3776-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-10-03 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2018-10-17 21:08:13
Security update for the Linux Kernel (important)
2018-10-08 15:09:43
debian
debian
[SECURITY] [DSA 4308-1] linux security update
2018-10-01 15:21:20
[SECURITY] [DSA 4308-1] linux security update
2018-10-01 15:21:20
[SECURITY] [DLA 1531-1] linux-4.9 security update
2018-10-03 23:59:07
osv
osv
linux - security update
2018-10-01 00:00:00
linux-4.9 - security update
2018-10-03 00:00:00
linux - security update
2018-10-03 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-01-31 00:22:22

7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

8.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON
Related for CESA-2018:3651
oraclelinux4nessus56redhat4openvas63veracode2redhatcve2prion2ubuntucve2debiancve2virtuozzo2cve2fedora25altlinux1f51ibm5ubuntu8amazon2photon2mageia3cloudfoundry2suse2debian3osv3slackware1