Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2018:3651
HistoryNov 26, 2018 - 11:00 p.m.

(RHSA-2018:3651) Moderate: kernel security, bug fix, and enhancement update

2018-11-2623:00:59
access.redhat.com
198

7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

8.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: stack-based buffer overflow in chap_server_compute_md5() in iscsi target (CVE-2018-14633)

  • kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service (CVE-2018-14646)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Vincent Pelletier for reporting CVE-2018-14633 and Christian Brauner for reporting CVE-2018-14646.

Bug Fix(es):

These updated kernel packages include also numerous bug fixes. Space precludes documenting all of the bug fixes in this advisory. See the descriptions in the related Knowledge Article: https://access.redhat.com/articles/3714371

OSVersionArchitecturePackageVersionFilename
RedHat7s390xperf-debuginfo< 3.10.0-957.1.3.el7perf-debuginfo-3.10.0-957.1.3.el7.s390x.rpm
RedHat7ppc64kernel-debug-devel< 3.10.0-957.1.3.el7kernel-debug-devel-3.10.0-957.1.3.el7.ppc64.rpm
RedHat7ppc64python-perf< 3.10.0-957.1.3.el7python-perf-3.10.0-957.1.3.el7.ppc64.rpm
RedHat7ppc64lekernel-devel< 3.10.0-957.1.3.el7kernel-devel-3.10.0-957.1.3.el7.ppc64le.rpm
RedHat7ppc64lekernel-debuginfo-common-ppc64le< 3.10.0-957.1.3.el7kernel-debuginfo-common-ppc64le-3.10.0-957.1.3.el7.ppc64le.rpm
RedHat7s390xkernel-kdump< 3.10.0-957.1.3.el7kernel-kdump-3.10.0-957.1.3.el7.s390x.rpm
RedHat7s390xkernel-headers< 3.10.0-957.1.3.el7kernel-headers-3.10.0-957.1.3.el7.s390x.rpm
RedHat7ppc64lekernel-debug< 3.10.0-957.1.3.el7kernel-debug-3.10.0-957.1.3.el7.ppc64le.rpm
RedHat7ppc64kernel-debug< 3.10.0-957.1.3.el7kernel-debug-3.10.0-957.1.3.el7.ppc64.rpm
RedHat7x86_64python-perf-debuginfo< 3.10.0-957.1.3.el7python-perf-debuginfo-3.10.0-957.1.3.el7.x86_64.rpm
Rows per page:
1-10 of 681

Related

centos 1
oraclelinux 4
nessus 57
redhat 3
openvas 49
veracode 2
redhatcve 2
prion 2
debiancve 2
ubuntucve 2
virtuozzo 2
cve 2
fedora 31
f5 1
altlinux 1
ibm 6
ubuntu 8
amazon 2
photon 2
mageia 3
cloudfoundry 2
suse 2
debian 3
osv 3
slackware 1
centos
centos
bpftool, kernel, perf, python security update
2018-12-13 20:56:53
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2018-11-27 00:00:00
kernel security, bug fix, and enhancement update
2019-01-29 00:00:00
Unbreakable Enterprise kernel security update
2019-06-04 00:00:00
nessus
nessus
RHEL 7 : kernel (RHSA-2018:3651)
2018-11-27 00:00:00
RHEL 7 : kernel-rt (RHSA-2018:3666)
2018-11-27 00:00:00
Oracle Linux 7 : kernel (ELSA-2018-3651)
2018-11-28 00:00:00
redhat
redhat
(RHSA-2018:3666) Moderate: kernel-rt security and bug fix update
2018-11-26 23:01:03
(RHSA-2018:3843) Moderate: kernel security and bug fix update
2018-12-18 14:07:12
(RHSA-2019:1946) Important: kernel security, bug fix, and enhancement update
2019-07-30 08:23:10
openvas
openvas
CentOS Update for kernel CESA-2018:3651 centos7
2018-12-18 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1232)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1182)
2020-01-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:27:25
Denial Of Service (DoS)
2019-01-15 09:26:45
redhatcve
redhatcve
CVE-2018-14646
2020-01-07 03:32:16
CVE-2018-14633
2022-01-13 06:33:33
prion
prion
Null pointer dereference
2018-11-26 19:29:00
Stack overflow
2018-09-25 00:29:00
debiancve
debiancve
CVE-2018-14646
2018-11-26 19:29:00
CVE-2018-14633
2018-09-25 00:29:00
ubuntucve
ubuntucve
CVE-2018-14646
2018-11-26 00:00:00
CVE-2018-14633
2018-09-24 00:00:00
virtuozzo
virtuozzo
Kernel security update: Virtuozzo ReadyKernel patch 67.0 for Virtuozzo 7.0.8 and 7.0.8 HF1
2018-11-30 00:00:00
Product update: Virtuozzo 7.0 Update 9 (7.0.9-534)
2019-03-05 00:00:00
cve
cve
CVE-2018-14646
2018-11-26 19:29:00
CVE-2018-14633
2018-09-25 00:29:00
fedora
fedora
[SECURITY] Fedora 28 Update: kernel-headers-4.18.10-200.fc28
2018-10-01 02:48:26
[SECURITY] Fedora 27 Update: kernel-headers-4.18.10-100.fc27
2018-10-01 01:23:44
[SECURITY] Fedora 28 Update: kernel-tools-4.18.10-200.fc28
2018-10-01 02:48:26
f5
f5
K73540515 : Linux kernel vulnerability CVE-2018-14633
2018-10-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.159-alt0.M80P.1
2018-10-09 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in kernel affects Power Hardware Management Console (CVE-2018-14633)
2021-09-22 23:05:38
Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities
2019-06-27 08:40:01
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u
2018-12-05 22:20:01
ubuntu
ubuntu
Linux kernel vulnerabilities
2018-10-02 00:00:00
Linux kernel vulnerabilities
2018-10-01 00:00:00
Linux kernel (Trusty HWE) vulnerabilities
2018-10-01 00:00:00
amazon
amazon
Important: kernel
2018-10-08 22:12:00
Important: kernel
2018-10-03 02:57:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0109
2018-11-20 00:00:00
Important Photon OS Security Update - PHSA-2018-0190
2018-09-25 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2018-10-27 12:45:46
Updated kernel-tmb packages fix security vulnerabilities
2018-10-27 12:45:46
Updated kernel-linus packages fix security vulnerabilities
2018-10-27 12:45:46
cloudfoundry
cloudfoundry
USN-3777-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2018-10-09 00:00:00
USN-3776-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-10-03 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2018-10-17 21:08:13
Security update for the Linux Kernel (important)
2018-10-08 15:09:43
debian
debian
[SECURITY] [DLA 1531-1] linux-4.9 security update
2018-10-03 23:59:07
[SECURITY] [DSA 4308-1] linux security update
2018-10-01 15:21:20
[SECURITY] [DSA 4308-1] linux security update
2018-10-01 15:21:20
osv
osv
linux-4.9 - security update
2018-10-03 00:00:00
linux - security update
2018-10-01 00:00:00
linux - security update
2018-10-03 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-01-31 00:22:22

7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

8.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

0.01 Low

EPSS

Percentile

83.7%

JSON
Related for RHSA-2018:3651
centos1oraclelinux4nessus57redhat3openvas49veracode2redhatcve2prion2debiancve2ubuntucve2virtuozzo2cve2fedora31f51altlinux1ibm6ubuntu8amazon2photon2mageia3cloudfoundry2suse2debian3osv3slackware1