Lucene search

K
redhatRedHatRHSA-2012:1148
HistoryAug 07, 2012 - 12:00 a.m.

(RHSA-2012:1148) Important: kernel security update

2012-08-0700:00:00
access.redhat.com
18

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.043 Low

EPSS

Percentile

91.4%

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

  • A NULL pointer dereference flaw was found in the nf_ct_frag6_reasm()
    function in the Linux kernel’s netfilter IPv6 connection tracking
    implementation. A remote attacker could use this flaw to send
    specially-crafted packets to a target system that is using IPv6 and also
    has the nf_conntrack_ipv6 kernel module loaded, causing it to crash.
    (CVE-2012-2744, Important)

Red Hat would like to thank an anonymous contributor working with the
Beyond Security SecuriTeam Secure Disclosure program for reporting this
issue.

Users should upgrade to these updated packages, which contain a backported
patch to resolve this issue. The system must be rebooted for this update to
take effect.

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.043 Low

EPSS

Percentile

91.4%