Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:0609
HistoryFeb 26, 2020 - 9:00 a.m.

(RHSA-2020:0609) Important: kernel-rt security and bug fix update

2020-02-2609:00:16
access.redhat.com
76

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.1%

JSON

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: use-after-free in fs/xfs/xfs_super.c (CVE-2018-20976)

  • kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation (CVE-2019-11085)

  • kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c (CVE-2019-14895)

  • kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c (CVE-2019-17133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • update the MRG 2.5.z 3.10 realtime-kernel sources (BZ#1794133)
OSVersionArchitecturePackageVersionFilename
RedHat6x86_64kernel-rt-vanilla-devel< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-vanilla-devel-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-debuginfo-common-x86_64< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-debuginfo-common-x86_64-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6noarchkernel-rt-firmware< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-firmware-3.10.0-693.64.1.rt56.662.el6rt.noarch.rpm
RedHat6x86_64kernel-rt-debug< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-debug-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-debug-devel< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-debug-devel-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-devel< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-devel-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-trace< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-trace-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-vanilla< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-vanilla-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-debug-debuginfo< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-debug-debuginfo-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
RedHat6x86_64kernel-rt-vanilla-debuginfo< 3.10.0-693.64.1.rt56.662.el6rtkernel-rt-vanilla-debuginfo-3.10.0-693.64.1.rt56.662.el6rt.x86_64.rpm
Rows per page:
1-10 of 151

Related

redhat 18
nessus 72
debiancve 4
redhatcve 4
veracode 2
ubuntucve 4
prion 4
oraclelinux 6
f5 4
symantec 1
cve 4
intel 1
virtuozzo 3
openvas 40
centos 4
photon 2
cloudfoundry 4
ubuntu 13
mageia 2
ibm 2
suse 3
threatpost 1
slackware 1
redhat
redhat
(RHSA-2020:0592) Important: kernel security, bug fix, and enhancement update
2020-02-25 11:32:29
(RHSA-2020:0543) Important: kernel security, bug fix, and enhancement update
2020-02-18 13:56:18
(RHSA-2020:0661) Important: kernel security and enhancement update
2020-03-03 09:45:44
nessus
nessus
RHEL 6 : kernel-rt (RHSA-2020:0609)
2020-03-02 00:00:00
RHEL 7 : kernel (RHSA-2020:0592)
2020-02-26 00:00:00
RHEL 7 : kernel (RHSA-2020:0543)
2020-02-19 00:00:00
debiancve
debiancve
CVE-2018-20976
2019-08-19 02:15:00
CVE-2019-11085
2019-05-17 16:29:00
CVE-2019-17133
2019-10-04 12:15:00
redhatcve
redhatcve
CVE-2019-11085
2019-10-27 12:25:54
CVE-2019-17133
2020-04-09 12:23:08
CVE-2018-20976
2019-08-20 08:52:59
veracode
veracode
Privilege Escalation
2019-08-05 00:16:14
Denial Of Service (DoS)
2020-01-22 00:30:56
ubuntucve
ubuntucve
CVE-2019-11085
2019-05-17 00:00:00
CVE-2019-17133
2019-10-04 00:00:00
CVE-2018-20976
2019-08-18 00:00:00
prion
prion
Input validation
2019-05-17 16:29:00
Design/Logic Flaw
2019-08-19 02:15:00
Buffer overflow
2019-10-04 12:15:00
oraclelinux
oraclelinux
kernel security and bug fix update
2020-02-05 00:00:00
kernel security and bug fix update
2020-03-12 00:00:00
kernel security and bug fix update
2020-02-07 00:00:00
f5
f5
K09376613 : INTEL-SA-00249 - Intel i915 Graphics for Linux vulnerability CVE-2019-11085
2019-05-19 00:00:00
K10269585 : Linux kernel vulnerability CVE-2018-20976
2019-10-10 00:00:00
K47227224 : Linux kernel vulnerability CVE-2019-17133
2020-09-11 00:00:00
symantec
symantec
Linux Kernel CVE-2019-17133 Buffer Overflow Vulnerability
2019-10-04 00:00:00
cve
cve
CVE-2019-17133
2019-10-04 12:15:00
CVE-2019-11085
2019-05-17 16:29:00
CVE-2018-20976
2019-08-19 02:15:00
intel
intel
Intel® i915 Graphics for Linux Advisory
2019-05-14 00:00:00
virtuozzo
virtuozzo
Important kernel security update: Virtuozzo ReadyKernel patch 97.0 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 2.5, 3.0, 3.5
2020-02-10 00:00:00
Important kernel security update: New kernel 2.6.32-042stab144.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2020-05-21 00:00:00
Important kernel security update: New kernel 2.6.32-042stab144.1; Virtuozzo 6.0 Update 12 Hotfix 51 (6.0.12-3757)
2020-05-21 00:00:00
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2020:0374)
2020-02-27 00:00:00
CentOS: Security Advisory for bpftool (CESA-2020:0375)
2020-02-06 00:00:00
Ubuntu: Security Advisory (USN-4144-1)
2019-10-02 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2020-02-06 00:10:13
bpftool, kernel, perf, python security update
2020-02-26 17:10:16
kernel, perf, python security update
2020-03-12 14:27:10
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0189
2019-11-15 00:00:00
Critical Photon OS Security Update - PHSA-2019-0189
2019-11-14 00:00:00
cloudfoundry
cloudfoundry
USN-4144-1: Linux kernel vulnerabilities | Cloud Foundry
2019-11-06 00:00:00
USN-4068-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2019-08-29 00:00:00
USN-4210-1: Linux kernel vulnerabilities | Cloud Foundry
2019-12-18 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2019-10-01 00:00:00
Linux kernel vulnerabilities
2019-12-03 00:00:00
Linux kernel (Xenial HWE) vulnerabilities
2019-12-03 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-01-17 13:16:50
Updated kernel-linus packages fix security vulnerabilities
2020-02-18 17:05:53
ibm
ibm
Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management
2020-06-19 18:07:55
Security Bulletin: IBM Security QRadar Packet Capture is vulnerable to Using Components with Known Vulnerabilities
2020-10-28 17:16:55
suse
suse
Security update for the Linux Kernel (important)
2019-10-27 00:00:00
Security update for the Linux Kernel (important)
2019-11-05 00:00:00
Security update for the Linux Kernel (important)
2019-05-31 00:00:00
threatpost
threatpost
Intel Fixes Critical, High-Severity Flaws Across Several Products
2019-05-21 21:02:56
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-11-07 22:31:40

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.1%

JSON
Related for RHSA-2020:0609
redhat18nessus72debiancve4redhatcve4veracode2ubuntucve4prion4oraclelinux6f54symantec1cve4intel1virtuozzo3openvas40centos4photon2cloudfoundry4ubuntu13mageia2ibm2suse3threatpost1slackware1