Updated kernel packages for Oracle Enterprise Linux 4.7

2.6.9-78 -alsa: Fix mic not working for HP XW series Brian Maly 453783 2.6.9-77 -alsa: Add missing quirks for alc262 Brian Maly 453783 -Revert 'i8042: remove polling timer support - Original bz 246233' Vivek Goyal 450918 2.6.9-76 -tty: fix tty holes Vivek Goyal 453155 CVE-2008-2812 -xen: fix use ...

kernel security and bug fix update

2.6.9-67.0.22.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/20/22 vulnerabilities (USN-625-1)

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

USN-625-1: Linux kernel vulnerabilities

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

Linux Kernel SCTP拒绝服务攻击漏洞

Secunia Advisory:SA20917 Linux Kernel被报告一个漏洞，此漏洞可被恶意攻击者操作进行拒绝服务攻击Denial of Service。 这个漏洞是由处理不带有块的SCTP信息包时的一个错误引起的。向一个易受攻击系统发送一个临时欺骗性SCTP信息包时这个漏洞会被操作导致内核崩溃。 Linux Kernel 2.6.x 升级到版本2.6.16.23或2.6.17.3。 http://www.kernel.org...

Linux Kernel "xt_sctp"拒绝服务攻击漏洞

Secunia Advisory:SA20703 Linux内核被报告一个漏洞，这个漏洞可被恶意攻击者操作进行拒绝服务攻击Denial of Service。 这个漏洞是因为对"xtsctp"代码的SCTP块长度缺省检查引起的。这可能通过一个0长度的块导致一个无限循环从而致使系统资源耗尽。 Linux Kernel 2.6.x 升级到版本2.6.17.1。 http://kernel.org/...

CVE-2008-2826

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

CVE-2008-2826

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

Integer overflow

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

CVE-2008-2826

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

CVE-2008-2826

Integer overflow in the sctpgetsockoptlocaladdrsold function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service resource consumption and system outage via vectors involving a large...

CVE-2008-2826

The vulnerability CVE-2008-2826 is present in the Linux kernel prior to 2.6.25.9, where an integer overflow in sctp_getsockopt_local_addrs_old (net/sctp/socket.c) allows local users to trigger a denial of service through a large addr_num in the sctp_getaddrs_old structure. The issue is mitigated ...

SOL8920 - Linux kernel vulnerability CVE-2007-2876

A flaw in the connection tracking support for SCTP allows a remote user to cause a denial of service by dereferencing a NULL pointer. Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the...

Sun Solaris SCTP协议处理远程拒绝服务漏洞

BUGTRAQ ID: 29024,29023 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris处理畸形SCTP报文时存在漏洞，如果远程攻击者向Solaris发送了特制的SCTP报文的话，就可能导致系统忙碌，或消耗过多的网络通讯，造成拒绝服务的情况。 Sun Solaris 10x86 Sun Solaris 10.0 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-236321）以及相应补丁: Sun-Alert-236321：A Security Vulnerability in Solaris 10 Involving the...

CVE-2008-2090

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

Code injection

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...

CVE-2008-2089

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service panic via a crafted SCTP packet...

Code injection

Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service panic via a crafted SCTP packet...

CVE-2008-2089

CVE-2008-2089 affects Sun Solaris 10 SCTP protocol implementation, enabling remote denial of service (panic) via a crafted SCTP packet. The connected Nessus entries indicate kernel patches for Solaris 10: 127127-11 (sparc) and 127128-11 (x86) that address this vulnerability. No exploitation detai...

CVE-2008-2090

Affected software: Sun Solaris 10 (SCTP protocol implementation).Vulnerability: Unspecified SCTP handling could allow remote attackers to cause denial of service via crafted SCTP packets, leading to CPU consumption and network traffic amplification.Impact: CVSS base score 7.8 (HIGH) with network ...