Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2006-4814 (GCVE-0-2006-4814)
Vulnerability from cvelistv5 – Published: 2006-12-20 02:00 – Updated: 2024-08-07 19:23- n/a
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T19:23:41.172Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2007-0002",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX",
"x_transferred"
],
"url": "http://www.trustix.org/errata/2007/0002/"
},
{
"name": "24098",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24098"
},
{
"name": "23609",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23609"
},
{
"name": "oval:org.mitre.oval:def:9648",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648"
},
{
"name": "RHSA-2007:0014",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
},
{
"name": "23436",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23436"
},
{
"name": "21663",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21663"
},
{
"name": "MDKSA-2007:040",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
},
{
"name": "USN-416-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/usn-416-1"
},
{
"name": "24100",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24100"
},
{
"name": "30110",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/30110"
},
{
"name": "ADV-2008-2222",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/2222/references"
},
{
"name": "ADV-2006-5082",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/5082"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6"
},
{
"name": "33280",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33280"
},
{
"name": "24206",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24206"
},
{
"name": "23997",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/23997"
},
{
"name": "20070615 rPSA-2007-0124-1 kernel xen",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/471457"
},
{
"name": "24482",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24482"
},
{
"name": "SUSE-SA:2007:018",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
},
{
"name": "DSA-1503",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2008/dsa-1503"
},
{
"name": "29058",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29058"
},
{
"name": "DSA-1304",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2007/dsa-1304"
},
{
"name": "RHSA-2008:0211",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
},
{
"name": "25714",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25714"
},
{
"name": "RHSA-2008:0787",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
},
{
"name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
},
{
"name": "25691",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25691"
},
{
"name": "MDKSA-2007:060",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
},
{
"name": "31246",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/31246"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-12-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "2007-0002",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX"
],
"url": "http://www.trustix.org/errata/2007/0002/"
},
{
"name": "24098",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24098"
},
{
"name": "23609",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23609"
},
{
"name": "oval:org.mitre.oval:def:9648",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648"
},
{
"name": "RHSA-2007:0014",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
},
{
"name": "23436",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23436"
},
{
"name": "21663",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21663"
},
{
"name": "MDKSA-2007:040",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
},
{
"name": "USN-416-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/usn-416-1"
},
{
"name": "24100",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24100"
},
{
"name": "30110",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/30110"
},
{
"name": "ADV-2008-2222",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/2222/references"
},
{
"name": "ADV-2006-5082",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/5082"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6"
},
{
"name": "33280",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33280"
},
{
"name": "24206",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24206"
},
{
"name": "23997",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/23997"
},
{
"name": "20070615 rPSA-2007-0124-1 kernel xen",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/471457"
},
{
"name": "24482",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24482"
},
{
"name": "SUSE-SA:2007:018",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
},
{
"name": "DSA-1503",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2008/dsa-1503"
},
{
"name": "29058",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29058"
},
{
"name": "DSA-1304",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2007/dsa-1304"
},
{
"name": "RHSA-2008:0211",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
},
{
"name": "25714",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25714"
},
{
"name": "RHSA-2008:0787",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
},
{
"name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
},
{
"name": "25691",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25691"
},
{
"name": "MDKSA-2007:060",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
},
{
"name": "31246",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/31246"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2006-4814",
"datePublished": "2006-12-20T02:00:00.000Z",
"dateReserved": "2006-09-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T19:23:41.172Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2006-4814",
"date": "2026-05-28",
"epss": "0.00091",
"percentile": "0.2558"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.4.33.5\", \"matchCriteriaId\": \"BB10C5DA-D220-434F-97B7-F971C582530C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C24A129D-2E5E-436C-95DE-AE75D2E8D092\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E244C37-E366-482E-9173-9376D0839839\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*\", \"matchCriteriaId\": \"11F96BB9-6509-4F1E-9590-E55EE8C6F992\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*\", \"matchCriteriaId\": \"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*\", \"matchCriteriaId\": \"718D4631-440E-4783-8966-B2A2D3EF89B3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*\", \"matchCriteriaId\": \"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*\", \"matchCriteriaId\": \"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*\", \"matchCriteriaId\": \"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*\", \"matchCriteriaId\": \"7015F57A-1E3B-42D2-9D12-F695078EFB21\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*\", \"matchCriteriaId\": \"467721EE-5130-46C5-BBB7-0F4878F3F171\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*\", \"matchCriteriaId\": \"171257E7-12C5-4283-88F7-FFE643995563\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*\", \"matchCriteriaId\": \"0887E02F-9F36-41F0-9F75-060B8414D7BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F49A384-7222-41F3-9BE1-4E18C00E50A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"05520FE3-C48D-42E8-BC24-C2396BD46CBA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D865FBB6-E07D-492F-A75E-168B06C8ADEE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"598F24C2-0366-4799-865C-5EE4572B734B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0399660-6385-45AB-9785-E504D8788146\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B91F6CBE-400F-4D0B-B893-34577B47A342\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1548ECFD-FCB5-4AE0-9788-42F61F25489F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6ABB9787-5497-4BDC-8952-F99CF60A89BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"615F6BA2-CD51-4159-B28A-A018CA9FC25C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"093848CB-68A1-4258-8357-373A477FE4E2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E275F440-A427-465F-B314-BF0730C781DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"98651D39-60CF-409F-8276-DBBB56B972AA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"067B8E09-C923-4DDA-92DB-4A2892CB526A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EBE3738-E530-4EC6-9FC6-1A063605BE05\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*\", \"matchCriteriaId\": \"D77F8919-4064-4EA5-A948-76178EA21F83\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5E7C423D-23DE-4C7B-A518-66F87E041925\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*\", \"matchCriteriaId\": \"8EA1382E-71B0-4E65-A310-716A244F4FB1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*\", \"matchCriteriaId\": \"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*\", \"matchCriteriaId\": \"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*\", \"matchCriteriaId\": \"824BBD31-8F3B-4F05-981B-ABF662BBF5F2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*\", \"matchCriteriaId\": \"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*\", \"matchCriteriaId\": \"388A5C99-1F60-4C20-9AE5-6E73E5A3F819\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F677E992-8D37-438F-97DF-9D98B28F020C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5888F8D7-15C2-4435-BB3C-8674DFAF0089\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*\", \"matchCriteriaId\": \"29439AD0-EB8D-4675-A77A-6548FF27ADA3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*\", \"matchCriteriaId\": \"F27AADF6-1605-47FC-8C4D-87827A578A90\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*\", \"matchCriteriaId\": \"B42F4080-A76F-4D17-85E2-CD2D2E4D0450\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*\", \"matchCriteriaId\": \"6968EF1D-7CC5-430D-866D-206F66486F63\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*\", \"matchCriteriaId\": \"50E6F5C5-BF74-4C10-830A-F232D528D290\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"476687F9-722B-490C-BD0B-B5F2CD7891DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A399D94B-D08D-4454-A07A-6634C9AE612F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCD8E4AE-FEF7-4CE2-B338-4F766921593F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*\", \"matchCriteriaId\": \"13A8B50A-73F6-4FCF-A81F-FB624FBA7143\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*\", \"matchCriteriaId\": \"8D27D843-2DA7-4481-857C-09FDC4FBD45C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BCB93128-2743-4668-8C48-9B7282D4A672\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"040991B8-FB4B-480B-B53B-AA7A884F9F19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BFA592BC-5846-4FC1-B2A7-13E622705DA8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"59688C40-C92F-431E-ADD7-6782622862D3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C5FE15BF-91C7-452A-BE1B-7EC9632421C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*\", \"matchCriteriaId\": \"15C1923C-D9C4-400D-9F0F-20B519EEC9C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E51913F9-FC7D-450A-9A82-5084AA74A5B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*\", \"matchCriteriaId\": \"B62E02D5-9EEE-439B-A510-BEEE28A9F358\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*\", \"matchCriteriaId\": \"02278C07-E649-427D-9E5C-F1738A01BCBD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E120257D-346B-4BA6-A431-E6F820FBB5FB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"361D407D-A4BE-491D-BC8E-32E78DC4A8F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4F83D55B-3106-4907-A75F-A7EBF0EC6974\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"0AFD594E-48BA-4281-8DEE-306E3008ABB9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A3CD7983-4EB2-4D17-9332-493ECBADC284\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"637A08D0-E382-4DE8-AEEC-6A53A72849B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"550DFE6E-DCE6-4649-8746-522996021DBA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D3D2AA2-05B2-46E3-96EE-27EB29795E04\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E17BB496-749A-40C8-BAA9-6CFBBE308065\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"AF51F68C-60A5-451F-9150-6DABBAE1D41E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A3BF9D6-BE14-4590-91B8-501DC92261BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C30F255-1297-46EA-9FBC-05564792FF65\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5A6E8B0E-DEDD-43D1-9841-4BAF5A805967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"934CBC22-864C-468F-B267-3CDE4449DA9E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AC432E3-7214-4B61-A666-2DAF5CCAEC52\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7682650A-8332-484D-874F-2B67246880B0\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n mincore en el n\\u00facleo de Linux anterior a 2.4.33.6 no bloquea adecuadamente el acceso al espacio del usuario, lo cual tiene impacto y vectores de ataque no especificados, posiblemente relativos a un bloqueo mortal.\"}]",
"id": "CVE-2006-4814",
"lastModified": "2024-11-21T00:16:49.043",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:S/C:N/I:N/A:C\", \"baseScore\": 4.6, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.1, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2006-12-20T02:28:00.000",
"references": "[{\"url\": \"http://lists.vmware.com/pipermail/security-announce/2008/000023.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2007-0014.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/23436\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23609\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23997\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24098\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24100\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24206\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24482\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/25691\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/25714\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29058\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/30110\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/31246\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/33280\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.debian.org/security/2007/dsa-1304\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1503\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:040\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:060\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_18_kernel.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0211.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0787.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/archive/1/471457\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/21663\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.trustix.org/errata/2007/0002/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-416-1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.vupen.com/english/advisories/2006/5082\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/2222/references\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.vmware.com/pipermail/security-announce/2008/000023.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2007-0014.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/23436\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23609\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/23997\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24098\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24100\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24206\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/24482\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/25691\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/25714\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/29058\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/30110\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/31246\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/33280\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2007/dsa-1304\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.debian.org/security/2008/dsa-1503\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:040\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.mandriva.com/security/advisories?name=MDKSA-2007:060\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2007_18_kernel.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0211.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2008-0787.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/471457\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/21663\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.trustix.org/errata/2007/0002/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/usn-416-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.vupen.com/english/advisories/2006/5082\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2008/2222/references\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vendorComments": "[{\"organization\": \"Red Hat\", \"comment\": \"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\", \"lastModified\": \"2007-03-14T00:00:00\"}]",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-399\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2006-4814\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2006-12-20T02:28:00.000\",\"lastModified\":\"2026-04-23T00:35:47.467\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n mincore en el n\u00facleo de Linux anterior a 2.4.33.6 no bloquea adecuadamente el acceso al espacio del usuario, lo cual tiene impacto y vectores de ataque no especificados, posiblemente relativos a un bloqueo mortal.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:S/C:N/I:N/A:C\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.1,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-399\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.4.33.5\",\"matchCriteriaId\":\"BB10C5DA-D220-434F-97B7-F971C582530C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C24A129D-2E5E-436C-95DE-AE75D2E8D092\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E244C37-E366-482E-9173-9376D0839839\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*\",\"matchCriteriaId\":\"11F96BB9-6509-4F1E-9590-E55EE8C6F992\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*\",\"matchCriteriaId\":\"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*\",\"matchCriteriaId\":\"718D4631-440E-4783-8966-B2A2D3EF89B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*\",\"matchCriteriaId\":\"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*\",\"matchCriteriaId\":\"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*\",\"matchCriteriaId\":\"7015F57A-1E3B-42D2-9D12-F695078EFB21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*\",\"matchCriteriaId\":\"467721EE-5130-46C5-BBB7-0F4878F3F171\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*\",\"matchCriteriaId\":\"171257E7-12C5-4283-88F7-FFE643995563\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*\",\"matchCriteriaId\":\"0887E02F-9F36-41F0-9F75-060B8414D7BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F49A384-7222-41F3-9BE1-4E18C00E50A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05520FE3-C48D-42E8-BC24-C2396BD46CBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D865FBB6-E07D-492F-A75E-168B06C8ADEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"598F24C2-0366-4799-865C-5EE4572B734B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0399660-6385-45AB-9785-E504D8788146\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B91F6CBE-400F-4D0B-B893-34577B47A342\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1548ECFD-FCB5-4AE0-9788-42F61F25489F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ABB9787-5497-4BDC-8952-F99CF60A89BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"615F6BA2-CD51-4159-B28A-A018CA9FC25C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"093848CB-68A1-4258-8357-373A477FE4E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E275F440-A427-465F-B314-BF0730C781DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98651D39-60CF-409F-8276-DBBB56B972AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"067B8E09-C923-4DDA-92DB-4A2892CB526A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EBE3738-E530-4EC6-9FC6-1A063605BE05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*\",\"matchCriteriaId\":\"D77F8919-4064-4EA5-A948-76178EA21F83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E7C423D-23DE-4C7B-A518-66F87E041925\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EA1382E-71B0-4E65-A310-716A244F4FB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*\",\"matchCriteriaId\":\"824BBD31-8F3B-4F05-981B-ABF662BBF5F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*\",\"matchCriteriaId\":\"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*\",\"matchCriteriaId\":\"388A5C99-1F60-4C20-9AE5-6E73E5A3F819\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F677E992-8D37-438F-97DF-9D98B28F020C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5888F8D7-15C2-4435-BB3C-8674DFAF0089\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*\",\"matchCriteriaId\":\"29439AD0-EB8D-4675-A77A-6548FF27ADA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F27AADF6-1605-47FC-8C4D-87827A578A90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*\",\"matchCriteriaId\":\"B42F4080-A76F-4D17-85E2-CD2D2E4D0450\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*\",\"matchCriteriaId\":\"6968EF1D-7CC5-430D-866D-206F66486F63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*\",\"matchCriteriaId\":\"50E6F5C5-BF74-4C10-830A-F232D528D290\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"476687F9-722B-490C-BD0B-B5F2CD7891DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A399D94B-D08D-4454-A07A-6634C9AE612F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCD8E4AE-FEF7-4CE2-B338-4F766921593F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*\",\"matchCriteriaId\":\"13A8B50A-73F6-4FCF-A81F-FB624FBA7143\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D27D843-2DA7-4481-857C-09FDC4FBD45C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCB93128-2743-4668-8C48-9B7282D4A672\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"040991B8-FB4B-480B-B53B-AA7A884F9F19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFA592BC-5846-4FC1-B2A7-13E622705DA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59688C40-C92F-431E-ADD7-6782622862D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5FE15BF-91C7-452A-BE1B-7EC9632421C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*\",\"matchCriteriaId\":\"15C1923C-D9C4-400D-9F0F-20B519EEC9C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E51913F9-FC7D-450A-9A82-5084AA74A5B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*\",\"matchCriteriaId\":\"B62E02D5-9EEE-439B-A510-BEEE28A9F358\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*\",\"matchCriteriaId\":\"02278C07-E649-427D-9E5C-F1738A01BCBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E120257D-346B-4BA6-A431-E6F820FBB5FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"361D407D-A4BE-491D-BC8E-32E78DC4A8F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F83D55B-3106-4907-A75F-A7EBF0EC6974\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AFD594E-48BA-4281-8DEE-306E3008ABB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3CD7983-4EB2-4D17-9332-493ECBADC284\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"637A08D0-E382-4DE8-AEEC-6A53A72849B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"550DFE6E-DCE6-4649-8746-522996021DBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3D2AA2-05B2-46E3-96EE-27EB29795E04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E17BB496-749A-40C8-BAA9-6CFBBE308065\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF51F68C-60A5-451F-9150-6DABBAE1D41E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A3BF9D6-BE14-4590-91B8-501DC92261BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C30F255-1297-46EA-9FBC-05564792FF65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A6E8B0E-DEDD-43D1-9841-4BAF5A805967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"934CBC22-864C-468F-B267-3CDE4449DA9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AC432E3-7214-4B61-A666-2DAF5CCAEC52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7682650A-8332-484D-874F-2B67246880B0\"}]}]}],\"references\":[{\"url\":\"http://lists.vmware.com/pipermail/security-announce/2008/000023.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2007-0014.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/23436\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23609\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23997\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24098\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24100\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24206\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24482\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/25691\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/25714\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/29058\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/30110\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/31246\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/33280\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2007/dsa-1304\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1503\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:040\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:060\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_18_kernel.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0211.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0787.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/471457\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/21663\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.trustix.org/errata/2007/0002/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/usn-416-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/5082\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/2222/references\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.vmware.com/pipermail/security-announce/2008/000023.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2007-0014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/23436\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23609\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23997\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24098\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24100\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24206\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/24482\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/25691\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/25714\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/29058\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/30110\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/31246\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/33280\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2007/dsa-1304\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.debian.org/security/2008/dsa-1503\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:040\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2007:060\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_18_kernel.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0211.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0787.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/471457\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/21663\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.trustix.org/errata/2007/0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/usn-416-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2006/5082\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2008/2222/references\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"vendorComments\":[{\"organization\":\"Red Hat\",\"comment\":\"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.\",\"lastModified\":\"2007-03-14T00:00:00\"}]}}"
}
}
RHSA-2008_0787
Vulnerability from csaf_redhat - Published: 2009-01-05 07:08 - Updated: 2024-11-22 02:26Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CWE-401 - Missing Release of Memory after Effective Lifetime| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-0:2.4.18-e.67.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-doc-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-smp-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AW:kernel-source-0:2.4.18-e.67.ia64 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages that fix a number of security issues are now\navailable for Red Hat Enterprise Linux 2.1 running on 64-bit architectures.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThese updated packages fix the following security issues:\n\n* a flaw was found in the IPv4 forwarding base that allowed a local,\nunprivileged user to cause an out-of-bounds access. (CVE-2007-2172,\nImportant)\n\n* a flaw was found in the handling of process death signals. This allowed a\nlocal, unprivileged user to send arbitrary signals to the suid-process\nexecuted by that user. Successful exploitation of this flaw depended on the\nstructure of the suid-program and its signal handling. (CVE-2007-3848,\nImportant)\n\n* when accessing kernel memory locations, certain Linux kernel drivers\nregistering a fault handler did not perform required range checks. A local,\nunprivileged user could use this flaw to gain read or write access to\narbitrary kernel memory, or possibly cause a kernel crash. (CVE-2008-0007,\nImportant)\n\n* a possible kernel memory leak was found in the Linux kernel Simple\nInternet Transition (SIT) INET6 implementation. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2008-2136, Important)\n\n* missing capability checks were found in the SBNI WAN driver which could\nallow a local, unprivileged user to bypass intended capability\nrestrictions. (CVE-2008-3525, Important)\n\n* a flaw was found in the way files were written using truncate() or\nftruncate(). This could allow a local, unprivileged user to acquire the\nprivileges of a different group and obtain access to sensitive information.\n(CVE-2008-4210, Important)\n\n* a flaw was found in the ELF handling on Itanium-based systems. This\ntriggered a cross-region memory-mapping and allowed a local, unprivileged\nuser to cause a local denial of service. (CVE-2006-4538, Moderate)\n\n* a race condition in the mincore system core allowed a local, unprivileged\nuser to cause a local denial of service (system hang). (CVE-2006-4814,\nModerate)\n\n* a flaw was found in the aacraid SCSI driver. This allowed a local,\nunprivileged user to make ioctl calls to the driver which should otherwise\nbe restricted to privileged users. (CVE-2007-4308, Moderate)\n\n* two buffer overflow flaws were found in the Integrated Services Digital\nNetwork (ISDN) subsystem. A local, unprivileged user could use these flaws\nto cause a denial of service. (CVE-2007-6063, CVE-2007-6151, Moderate)\n\n* a flaw was found in the way core dump files were created. If a local,\nunprivileged user could make a root-owned process dump a core file into a\nuser-writable directory, the user could gain read access to that core file,\npotentially compromising sensitive information. (CVE-2007-6206, Moderate)\n\n* a deficiency was found in the Linux kernel virtual file system (VFS)\nimplementation. This could allow a local, unprivileged user to attempt file\ncreation within deleted directories, possibly causing a local denial of\nservice. (CVE-2008-3275, Moderate)\n\nAll users of Red Hat Enterprise Linux 2.1 on 64-bit architectures should\nupgrade to these updated packages, which contain backported patches to\nresolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2008:0787",
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "250429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
},
{
"category": "external",
"summary": "250972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
},
{
"category": "external",
"summary": "252309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
},
{
"category": "external",
"summary": "289151",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=289151"
},
{
"category": "external",
"summary": "306971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
},
{
"category": "external",
"summary": "392101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
},
{
"category": "external",
"summary": "396861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
},
{
"category": "external",
"summary": "425111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
},
{
"category": "external",
"summary": "428961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
},
{
"category": "external",
"summary": "446031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
},
{
"category": "external",
"summary": "457858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
},
{
"category": "external",
"summary": "460401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
},
{
"category": "external",
"summary": "463661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2008_0787.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2024-11-22T02:26:22+00:00",
"generator": {
"date": "2024-11-22T02:26:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2008:0787",
"initial_release_date": "2009-01-05T07:08:00+00:00",
"revision_history": [
{
"date": "2009-01-05T07:08:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-01-05T02:08:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T02:26:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux Advanced Workstation 2.1",
"product": {
"name": "Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-smp-0:2.4.18-e.67.ia64",
"product": {
"name": "kernel-smp-0:2.4.18-e.67.ia64",
"product_id": "kernel-smp-0:2.4.18-e.67.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-smp@2.4.18-e.67?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.4.18-e.67.ia64",
"product": {
"name": "kernel-0:2.4.18-e.67.ia64",
"product_id": "kernel-0:2.4.18-e.67.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.18-e.67?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.4.18-e.67.ia64",
"product": {
"name": "kernel-doc-0:2.4.18-e.67.ia64",
"product_id": "kernel-doc-0:2.4.18-e.67.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.4.18-e.67?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:2.4.18-e.67.ia64",
"product": {
"name": "kernel-source-0:2.4.18-e.67.ia64",
"product_id": "kernel-source-0:2.4.18-e.67.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-source@2.4.18-e.67?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.4.18-e.67.src",
"product": {
"name": "kernel-0:2.4.18-e.67.src",
"product_id": "kernel-0:2.4.18-e.67.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.18-e.67?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.18-e.67.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.18-e.67.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.18-e.67.src"
},
"product_reference": "kernel-0:2.4.18-e.67.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.18-e.67.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-doc-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-doc-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.18-e.67.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-smp-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-smp-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.18-e.67.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-source-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-source-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.18-e.67.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:kernel-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.18-e.67.src as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:kernel-0:2.4.18-e.67.src"
},
"product_reference": "kernel-0:2.4.18-e.67.src",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.18-e.67.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:kernel-doc-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-doc-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.18-e.67.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:kernel-smp-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-smp-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AW"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.18-e.67.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
"product_id": "2.1AW:kernel-source-0:2.4.18-e.67.ia64"
},
"product_reference": "kernel-source-0:2.4.18-e.67.ia64",
"relates_to_product_reference": "2.1AW"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-4538",
"discovery_date": "2006-09-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "289151"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Local DoS with corrupted ELF",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4538"
},
{
"category": "external",
"summary": "RHBZ#289151",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=289151"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4538",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4538"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4538",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4538"
}
],
"release_date": "2006-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Local DoS with corrupted ELF"
},
{
"cve": "CVE-2006-4814",
"discovery_date": "2006-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "306971"
}
],
"notes": [
{
"category": "description",
"text": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel Race condition in mincore can cause \"ps -ef\" to hang",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4814"
},
{
"category": "external",
"summary": "RHBZ#306971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4814",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814"
}
],
"release_date": "2006-12-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel Race condition in mincore can cause \"ps -ef\" to hang"
},
{
"cve": "CVE-2007-2172",
"discovery_date": "2007-04-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "250429"
}
],
"notes": [
{
"category": "description",
"text": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fib_semantics.c out of bounds access vulnerability",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-2172"
},
{
"category": "external",
"summary": "RHBZ#250429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-2172",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172"
}
],
"release_date": "2007-03-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fib_semantics.c out of bounds access vulnerability"
},
{
"cve": "CVE-2007-3848",
"discovery_date": "2007-07-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "250972"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Privilege escalation via PR_SET_PDEATHSIG",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-3848"
},
{
"category": "external",
"summary": "RHBZ#250972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-3848",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3848"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848"
}
],
"release_date": "2007-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Privilege escalation via PR_SET_PDEATHSIG"
},
{
"cve": "CVE-2007-4308",
"discovery_date": "2007-07-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "252309"
}
],
"notes": [
{
"category": "description",
"text": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Missing ioctl() permission checks in aacraid driver",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4308"
},
{
"category": "external",
"summary": "RHBZ#252309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4308",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308"
}
],
"release_date": "2007-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Missing ioctl() permission checks in aacraid driver"
},
{
"cve": "CVE-2007-6063",
"discovery_date": "2007-11-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "392101"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Linux Kernel isdn_net_setcfg buffer overflow",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6063"
},
{
"category": "external",
"summary": "RHBZ#392101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6063",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063"
}
],
"release_date": "2007-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Linux Kernel isdn_net_setcfg buffer overflow"
},
{
"cve": "CVE-2007-6151",
"discovery_date": "2007-12-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "425111"
}
],
"notes": [
{
"category": "description",
"text": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "I4L: fix isdn_ioctl memory issue",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6151"
},
{
"category": "external",
"summary": "RHBZ#425111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6151",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151"
}
],
"release_date": "2007-12-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "I4L: fix isdn_ioctl memory issue"
},
{
"cve": "CVE-2007-6206",
"discovery_date": "2004-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "396861"
}
],
"notes": [
{
"category": "description",
"text": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Issue with core dump owner",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6206"
},
{
"category": "external",
"summary": "RHBZ#396861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6206",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206"
}
],
"release_date": "2004-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Issue with core dump owner"
},
{
"acknowledgments": [
{
"names": [
"Nick Piggin"
]
}
],
"cve": "CVE-2008-0007",
"discovery_date": "2008-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "428961"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: insufficient range checks in fault handlers with mremap",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0007"
},
{
"category": "external",
"summary": "RHBZ#428961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0007",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007"
}
],
"release_date": "2008-02-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: insufficient range checks in fault handlers with mremap"
},
{
"cve": "CVE-2008-2136",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2008-05-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "446031"
}
],
"notes": [
{
"category": "description",
"text": "Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: sit memory leak",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2136"
},
{
"category": "external",
"summary": "RHBZ#446031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2136",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136"
}
],
"release_date": "2008-05-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: sit memory leak"
},
{
"cve": "CVE-2008-3275",
"discovery_date": "2008-08-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "457858"
}
],
"notes": [
{
"category": "description",
"text": "The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Linux kernel local filesystem DoS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3275"
},
{
"category": "external",
"summary": "RHBZ#457858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3275",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3275"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275"
}
],
"release_date": "2008-07-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Linux kernel local filesystem DoS"
},
{
"cve": "CVE-2008-3525",
"discovery_date": "2008-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "460401"
}
],
"notes": [
{
"category": "description",
"text": "The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: missing capability checks in sbni_ioctl()",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3525"
},
{
"category": "external",
"summary": "RHBZ#460401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3525",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525"
}
],
"release_date": "2008-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: missing capability checks in sbni_ioctl()"
},
{
"cve": "CVE-2008-4210",
"discovery_date": "2008-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "463661"
}
],
"notes": [
{
"category": "description",
"text": "fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: open() call allows setgid bit when user is not in new file\u0027s group",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4210"
},
{
"category": "external",
"summary": "RHBZ#463661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4210",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4210"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210"
}
],
"release_date": "2007-05-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-05T07:08:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.18-e.67.ia64",
"2.1AS:kernel-0:2.4.18-e.67.src",
"2.1AS:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AS:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AS:kernel-source-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.ia64",
"2.1AW:kernel-0:2.4.18-e.67.src",
"2.1AW:kernel-doc-0:2.4.18-e.67.ia64",
"2.1AW:kernel-smp-0:2.4.18-e.67.ia64",
"2.1AW:kernel-source-0:2.4.18-e.67.ia64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2008:0787"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: open() call allows setgid bit when user is not in new file\u0027s group"
}
]
}
RHSA-2009:0001
Vulnerability from csaf_redhat - Published: 2009-01-08 15:47 - Updated: 2025-11-21 17:34The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CWE-401 - Missing Release of Memory after Effective Lifetime| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages that fix a number of security issues are now\navailable for Red Hat Enterprise Linux 2.1 running on 32-bit architectures.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThese updated packages fix the following security issues:\n\n* a flaw was found in the IPv4 forwarding base. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2007-2172,\nImportant)\n\n* a flaw was found in the handling of process death signals. This allowed a\nlocal, unprivileged user to send arbitrary signals to the suid-process\nexecuted by that user. Successful exploitation of this flaw depends on the\nstructure of the suid-program and its signal handling. (CVE-2007-3848,\nImportant)\n\n* when accessing kernel memory locations, certain Linux kernel drivers\nregistering a fault handler did not perform required range checks. A local,\nunprivileged user could use this flaw to gain read or write access to\narbitrary kernel memory, or possibly cause a denial of service.\n(CVE-2008-0007, Important)\n\n* a possible kernel memory leak was found in the Linux kernel Simple\nInternet Transition (SIT) INET6 implementation. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2008-2136, Important)\n\n* missing capability checks were found in the SBNI WAN driver which could\nallow a local, unprivileged user to bypass intended capability\nrestrictions. (CVE-2008-3525, Important)\n\n* a flaw was found in the way files were written using truncate() or\nftruncate(). This could allow a local, unprivileged user to acquire the\nprivileges of a different group and obtain access to sensitive information.\n(CVE-2008-4210, Important)\n\n* a race condition in the mincore system core allowed a local, unprivileged\nuser to cause a denial of service. (CVE-2006-4814, Moderate)\n\n* a flaw was found in the aacraid SCSI driver. This allowed a local,\nunprivileged user to make ioctl calls to the driver which should otherwise\nbe restricted to privileged users. (CVE-2007-4308, Moderate)\n\n* two buffer overflow flaws were found in the Integrated Services Digital\nNetwork (ISDN) subsystem. A local, unprivileged user could use these flaws\nto cause a denial of service. (CVE-2007-6063, CVE-2007-6151, Moderate)\n\n* a flaw was found in the way core dump files were created. If a local,\nunprivileged user could make a root-owned process dump a core file into a\nuser-writable directory, the user could gain read access to that core file,\npotentially compromising sensitive information. (CVE-2007-6206, Moderate)\n\n* a deficiency was found in the Linux kernel virtual file system (VFS)\nimplementation. This could allow a local, unprivileged user to attempt file\ncreation within deleted directories, possibly causing a denial of service.\n(CVE-2008-3275, Moderate)\n\nAll users of Red Hat Enterprise Linux 2.1 on 32-bit architectures should\nupgrade to these updated packages which address these vulnerabilities. For\nthis update to take effect, the system must be rebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:0001",
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
},
{
"category": "external",
"summary": "250429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "250972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
},
{
"category": "external",
"summary": "252309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
},
{
"category": "external",
"summary": "306971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
},
{
"category": "external",
"summary": "392101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
},
{
"category": "external",
"summary": "396861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
},
{
"category": "external",
"summary": "425111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
},
{
"category": "external",
"summary": "428961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
},
{
"category": "external",
"summary": "446031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
},
{
"category": "external",
"summary": "457858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
},
{
"category": "external",
"summary": "460401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
},
{
"category": "external",
"summary": "463661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0001.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2025-11-21T17:34:05+00:00",
"generator": {
"date": "2025-11-21T17:34:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2009:0001",
"initial_release_date": "2009-01-08T15:47:00+00:00",
"revision_history": [
{
"date": "2009-01-08T15:47:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-01-08T10:47:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:34:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-headers-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-headers-0:2.4.9-e.74.i386",
"product_id": "kernel-headers-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.4.9-e.74?arch=i386"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-source-0:2.4.9-e.74.i386",
"product_id": "kernel-source-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-source@2.4.9-e.74?arch=i386"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-doc-0:2.4.9-e.74.i386",
"product_id": "kernel-doc-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.4.9-e.74?arch=i386"
}
}
},
{
"category": "product_version",
"name": "kernel-BOOT-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386",
"product_id": "kernel-BOOT-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-BOOT@2.4.9-e.74?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-smp-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-smp-0:2.4.9-e.74.i686",
"product_id": "kernel-smp-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-0:2.4.9-e.74.i686",
"product_id": "kernel-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-debug-0:2.4.9-e.74.i686",
"product_id": "kernel-debug-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-enterprise-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686",
"product_id": "kernel-enterprise-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-enterprise@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-summit-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-summit-0:2.4.9-e.74.i686",
"product_id": "kernel-summit-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-summit@2.4.9-e.74?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-smp-0:2.4.9-e.74.athlon",
"product": {
"name": "kernel-smp-0:2.4.9-e.74.athlon",
"product_id": "kernel-smp-0:2.4.9-e.74.athlon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.74?arch=athlon"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.4.9-e.74.athlon",
"product": {
"name": "kernel-0:2.4.9-e.74.athlon",
"product_id": "kernel-0:2.4.9-e.74.athlon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=athlon"
}
}
}
],
"category": "architecture",
"name": "athlon"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.4.9-e.74.src",
"product": {
"name": "kernel-0:2.4.9-e.74.src",
"product_id": "kernel-0:2.4.9-e.74.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.9-e.74.src"
},
"product_reference": "kernel-0:2.4.9-e.74.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-debug-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-debug-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-doc-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-doc-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-headers-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-headers-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-smp-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-smp-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-source-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-source-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-summit-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-summit-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-0:2.4.9-e.74.src"
},
"product_reference": "kernel-0:2.4.9-e.74.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-debug-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-debug-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-doc-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-doc-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-headers-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-headers-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-smp-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-smp-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-source-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-source-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-summit-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-summit-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-0:2.4.9-e.74.src"
},
"product_reference": "kernel-0:2.4.9-e.74.src",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-debug-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-debug-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-doc-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-doc-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-headers-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-headers-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-smp-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-smp-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-source-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-source-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-summit-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-4814",
"discovery_date": "2006-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "306971"
}
],
"notes": [
{
"category": "description",
"text": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel Race condition in mincore can cause \"ps -ef\" to hang",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4814"
},
{
"category": "external",
"summary": "RHBZ#306971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4814",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814"
}
],
"release_date": "2006-12-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel Race condition in mincore can cause \"ps -ef\" to hang"
},
{
"cve": "CVE-2007-2172",
"discovery_date": "2007-04-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "250429"
}
],
"notes": [
{
"category": "description",
"text": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fib_semantics.c out of bounds access vulnerability",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-2172"
},
{
"category": "external",
"summary": "RHBZ#250429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-2172",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172"
}
],
"release_date": "2007-03-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fib_semantics.c out of bounds access vulnerability"
},
{
"cve": "CVE-2007-3848",
"discovery_date": "2007-07-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "250972"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Privilege escalation via PR_SET_PDEATHSIG",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-3848"
},
{
"category": "external",
"summary": "RHBZ#250972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-3848",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3848"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848"
}
],
"release_date": "2007-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Privilege escalation via PR_SET_PDEATHSIG"
},
{
"cve": "CVE-2007-4308",
"discovery_date": "2007-07-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "252309"
}
],
"notes": [
{
"category": "description",
"text": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Missing ioctl() permission checks in aacraid driver",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4308"
},
{
"category": "external",
"summary": "RHBZ#252309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4308",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308"
}
],
"release_date": "2007-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Missing ioctl() permission checks in aacraid driver"
},
{
"cve": "CVE-2007-6063",
"discovery_date": "2007-11-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "392101"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Linux Kernel isdn_net_setcfg buffer overflow",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6063"
},
{
"category": "external",
"summary": "RHBZ#392101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6063",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063"
}
],
"release_date": "2007-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Linux Kernel isdn_net_setcfg buffer overflow"
},
{
"cve": "CVE-2007-6151",
"discovery_date": "2007-12-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "425111"
}
],
"notes": [
{
"category": "description",
"text": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "I4L: fix isdn_ioctl memory issue",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6151"
},
{
"category": "external",
"summary": "RHBZ#425111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6151",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151"
}
],
"release_date": "2007-12-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "I4L: fix isdn_ioctl memory issue"
},
{
"cve": "CVE-2007-6206",
"discovery_date": "2004-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "396861"
}
],
"notes": [
{
"category": "description",
"text": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Issue with core dump owner",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6206"
},
{
"category": "external",
"summary": "RHBZ#396861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6206",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206"
}
],
"release_date": "2004-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Issue with core dump owner"
},
{
"acknowledgments": [
{
"names": [
"Nick Piggin"
]
}
],
"cve": "CVE-2008-0007",
"discovery_date": "2008-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "428961"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: insufficient range checks in fault handlers with mremap",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0007"
},
{
"category": "external",
"summary": "RHBZ#428961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0007",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007"
}
],
"release_date": "2008-02-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: insufficient range checks in fault handlers with mremap"
},
{
"cve": "CVE-2008-2136",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2008-05-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "446031"
}
],
"notes": [
{
"category": "description",
"text": "Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: sit memory leak",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2136"
},
{
"category": "external",
"summary": "RHBZ#446031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2136",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136"
}
],
"release_date": "2008-05-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: sit memory leak"
},
{
"cve": "CVE-2008-3275",
"discovery_date": "2008-08-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "457858"
}
],
"notes": [
{
"category": "description",
"text": "The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Linux kernel local filesystem DoS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3275"
},
{
"category": "external",
"summary": "RHBZ#457858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3275",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3275"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275"
}
],
"release_date": "2008-07-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Linux kernel local filesystem DoS"
},
{
"cve": "CVE-2008-3525",
"discovery_date": "2008-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "460401"
}
],
"notes": [
{
"category": "description",
"text": "The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: missing capability checks in sbni_ioctl()",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3525"
},
{
"category": "external",
"summary": "RHBZ#460401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3525",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525"
}
],
"release_date": "2008-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: missing capability checks in sbni_ioctl()"
},
{
"cve": "CVE-2008-4210",
"discovery_date": "2008-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "463661"
}
],
"notes": [
{
"category": "description",
"text": "fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: open() call allows setgid bit when user is not in new file\u0027s group",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4210"
},
{
"category": "external",
"summary": "RHBZ#463661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4210",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4210"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210"
}
],
"release_date": "2007-05-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: open() call allows setgid bit when user is not in new file\u0027s group"
}
]
}
RHSA-2009_0001
Vulnerability from csaf_redhat - Published: 2009-01-08 15:47 - Updated: 2024-11-22 02:26The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.
CWE-401 - Missing Release of Memory after Effective Lifetime| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1AS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1ES:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-0:2.4.9-e.74.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-BOOT-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-debug-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-doc-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-enterprise-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-headers-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.athlon | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-smp-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-source-0:2.4.9-e.74.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 2.1WS:kernel-summit-0:2.4.9-e.74.i686 | — |
Vendor Fix
fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages that fix a number of security issues are now\navailable for Red Hat Enterprise Linux 2.1 running on 32-bit architectures.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThese updated packages fix the following security issues:\n\n* a flaw was found in the IPv4 forwarding base. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2007-2172,\nImportant)\n\n* a flaw was found in the handling of process death signals. This allowed a\nlocal, unprivileged user to send arbitrary signals to the suid-process\nexecuted by that user. Successful exploitation of this flaw depends on the\nstructure of the suid-program and its signal handling. (CVE-2007-3848,\nImportant)\n\n* when accessing kernel memory locations, certain Linux kernel drivers\nregistering a fault handler did not perform required range checks. A local,\nunprivileged user could use this flaw to gain read or write access to\narbitrary kernel memory, or possibly cause a denial of service.\n(CVE-2008-0007, Important)\n\n* a possible kernel memory leak was found in the Linux kernel Simple\nInternet Transition (SIT) INET6 implementation. This could allow a local,\nunprivileged user to cause a denial of service. (CVE-2008-2136, Important)\n\n* missing capability checks were found in the SBNI WAN driver which could\nallow a local, unprivileged user to bypass intended capability\nrestrictions. (CVE-2008-3525, Important)\n\n* a flaw was found in the way files were written using truncate() or\nftruncate(). This could allow a local, unprivileged user to acquire the\nprivileges of a different group and obtain access to sensitive information.\n(CVE-2008-4210, Important)\n\n* a race condition in the mincore system core allowed a local, unprivileged\nuser to cause a denial of service. (CVE-2006-4814, Moderate)\n\n* a flaw was found in the aacraid SCSI driver. This allowed a local,\nunprivileged user to make ioctl calls to the driver which should otherwise\nbe restricted to privileged users. (CVE-2007-4308, Moderate)\n\n* two buffer overflow flaws were found in the Integrated Services Digital\nNetwork (ISDN) subsystem. A local, unprivileged user could use these flaws\nto cause a denial of service. (CVE-2007-6063, CVE-2007-6151, Moderate)\n\n* a flaw was found in the way core dump files were created. If a local,\nunprivileged user could make a root-owned process dump a core file into a\nuser-writable directory, the user could gain read access to that core file,\npotentially compromising sensitive information. (CVE-2007-6206, Moderate)\n\n* a deficiency was found in the Linux kernel virtual file system (VFS)\nimplementation. This could allow a local, unprivileged user to attempt file\ncreation within deleted directories, possibly causing a denial of service.\n(CVE-2008-3275, Moderate)\n\nAll users of Red Hat Enterprise Linux 2.1 on 32-bit architectures should\nupgrade to these updated packages which address these vulnerabilities. For\nthis update to take effect, the system must be rebooted.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2009:0001",
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "250429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
},
{
"category": "external",
"summary": "250972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
},
{
"category": "external",
"summary": "252309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
},
{
"category": "external",
"summary": "306971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
},
{
"category": "external",
"summary": "392101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
},
{
"category": "external",
"summary": "396861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
},
{
"category": "external",
"summary": "425111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
},
{
"category": "external",
"summary": "428961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
},
{
"category": "external",
"summary": "446031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
},
{
"category": "external",
"summary": "457858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
},
{
"category": "external",
"summary": "460401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
},
{
"category": "external",
"summary": "463661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0001.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2024-11-22T02:26:38+00:00",
"generator": {
"date": "2024-11-22T02:26:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2009:0001",
"initial_release_date": "2009-01-08T15:47:00+00:00",
"revision_history": [
{
"date": "2009-01-08T15:47:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2009-01-08T10:47:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T02:26:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-headers-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-headers-0:2.4.9-e.74.i386",
"product_id": "kernel-headers-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.4.9-e.74?arch=i386"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-source-0:2.4.9-e.74.i386",
"product_id": "kernel-source-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-source@2.4.9-e.74?arch=i386"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-doc-0:2.4.9-e.74.i386",
"product_id": "kernel-doc-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.4.9-e.74?arch=i386"
}
}
},
{
"category": "product_version",
"name": "kernel-BOOT-0:2.4.9-e.74.i386",
"product": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386",
"product_id": "kernel-BOOT-0:2.4.9-e.74.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-BOOT@2.4.9-e.74?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-smp-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-smp-0:2.4.9-e.74.i686",
"product_id": "kernel-smp-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-0:2.4.9-e.74.i686",
"product_id": "kernel-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-debug-0:2.4.9-e.74.i686",
"product_id": "kernel-debug-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-enterprise-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686",
"product_id": "kernel-enterprise-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-enterprise@2.4.9-e.74?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-summit-0:2.4.9-e.74.i686",
"product": {
"name": "kernel-summit-0:2.4.9-e.74.i686",
"product_id": "kernel-summit-0:2.4.9-e.74.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-summit@2.4.9-e.74?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-smp-0:2.4.9-e.74.athlon",
"product": {
"name": "kernel-smp-0:2.4.9-e.74.athlon",
"product_id": "kernel-smp-0:2.4.9-e.74.athlon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.74?arch=athlon"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.4.9-e.74.athlon",
"product": {
"name": "kernel-0:2.4.9-e.74.athlon",
"product_id": "kernel-0:2.4.9-e.74.athlon",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=athlon"
}
}
}
],
"category": "architecture",
"name": "athlon"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.4.9-e.74.src",
"product": {
"name": "kernel-0:2.4.9-e.74.src",
"product_id": "kernel-0:2.4.9-e.74.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.4.9-e.74?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-0:2.4.9-e.74.src"
},
"product_reference": "kernel-0:2.4.9-e.74.src",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-BOOT-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-debug-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-debug-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-doc-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-doc-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-enterprise-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-headers-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-headers-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-smp-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-smp-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-source-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-source-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "2.1AS:kernel-summit-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-summit-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-0:2.4.9-e.74.src"
},
"product_reference": "kernel-0:2.4.9-e.74.src",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-BOOT-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-debug-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-debug-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-doc-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-doc-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-enterprise-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-headers-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-headers-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-smp-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-smp-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-source-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-source-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
"product_id": "2.1ES:kernel-summit-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-summit-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.4.9-e.74.src as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-0:2.4.9-e.74.src"
},
"product_reference": "kernel-0:2.4.9-e.74.src",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-BOOT-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-BOOT-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-BOOT-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-debug-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-debug-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-doc-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-doc-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-enterprise-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-enterprise-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-enterprise-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-headers-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-headers-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-smp-0:2.4.9-e.74.athlon"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.athlon",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-smp-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-smp-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-smp-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:2.4.9-e.74.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-source-0:2.4.9-e.74.i386"
},
"product_reference": "kernel-source-0:2.4.9-e.74.i386",
"relates_to_product_reference": "2.1WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-summit-0:2.4.9-e.74.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
"product_id": "2.1WS:kernel-summit-0:2.4.9-e.74.i686"
},
"product_reference": "kernel-summit-0:2.4.9-e.74.i686",
"relates_to_product_reference": "2.1WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-4814",
"discovery_date": "2006-02-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "306971"
}
],
"notes": [
{
"category": "description",
"text": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel Race condition in mincore can cause \"ps -ef\" to hang",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-4814"
},
{
"category": "external",
"summary": "RHBZ#306971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=306971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-4814",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4814"
}
],
"release_date": "2006-12-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel Race condition in mincore can cause \"ps -ef\" to hang"
},
{
"cve": "CVE-2007-2172",
"discovery_date": "2007-04-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "250429"
}
],
"notes": [
{
"category": "description",
"text": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fib_semantics.c out of bounds access vulnerability",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-2172"
},
{
"category": "external",
"summary": "RHBZ#250429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-2172",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2172"
}
],
"release_date": "2007-03-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fib_semantics.c out of bounds access vulnerability"
},
{
"cve": "CVE-2007-3848",
"discovery_date": "2007-07-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "250972"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Privilege escalation via PR_SET_PDEATHSIG",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-3848"
},
{
"category": "external",
"summary": "RHBZ#250972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=250972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-3848",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-3848"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3848"
}
],
"release_date": "2007-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Privilege escalation via PR_SET_PDEATHSIG"
},
{
"cve": "CVE-2007-4308",
"discovery_date": "2007-07-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "252309"
}
],
"notes": [
{
"category": "description",
"text": "The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Missing ioctl() permission checks in aacraid driver",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4308"
},
{
"category": "external",
"summary": "RHBZ#252309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=252309"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4308",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4308"
}
],
"release_date": "2007-07-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Missing ioctl() permission checks in aacraid driver"
},
{
"cve": "CVE-2007-6063",
"discovery_date": "2007-11-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "392101"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Linux Kernel isdn_net_setcfg buffer overflow",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6063"
},
{
"category": "external",
"summary": "RHBZ#392101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=392101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6063",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6063"
}
],
"release_date": "2007-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Linux Kernel isdn_net_setcfg buffer overflow"
},
{
"cve": "CVE-2007-6151",
"discovery_date": "2007-12-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "425111"
}
],
"notes": [
{
"category": "description",
"text": "The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "I4L: fix isdn_ioctl memory issue",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6151"
},
{
"category": "external",
"summary": "RHBZ#425111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=425111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6151",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6151"
}
],
"release_date": "2007-12-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "I4L: fix isdn_ioctl memory issue"
},
{
"cve": "CVE-2007-6206",
"discovery_date": "2004-07-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "396861"
}
],
"notes": [
{
"category": "description",
"text": "The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Issue with core dump owner",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-6206"
},
{
"category": "external",
"summary": "RHBZ#396861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=396861"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-6206",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-6206"
}
],
"release_date": "2004-07-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Issue with core dump owner"
},
{
"acknowledgments": [
{
"names": [
"Nick Piggin"
]
}
],
"cve": "CVE-2008-0007",
"discovery_date": "2008-01-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "428961"
}
],
"notes": [
{
"category": "description",
"text": "Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: insufficient range checks in fault handlers with mremap",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-0007"
},
{
"category": "external",
"summary": "RHBZ#428961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=428961"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-0007",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-0007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0007"
}
],
"release_date": "2008-02-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: insufficient range checks in fault handlers with mremap"
},
{
"cve": "CVE-2008-2136",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2008-05-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "446031"
}
],
"notes": [
{
"category": "description",
"text": "Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: sit memory leak",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-2136"
},
{
"category": "external",
"summary": "RHBZ#446031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=446031"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-2136",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-2136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2136"
}
],
"release_date": "2008-05-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: sit memory leak"
},
{
"cve": "CVE-2008-3275",
"discovery_date": "2008-08-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "457858"
}
],
"notes": [
{
"category": "description",
"text": "The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (\"overflow\" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Linux kernel local filesystem DoS",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3275"
},
{
"category": "external",
"summary": "RHBZ#457858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=457858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3275",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3275"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3275"
}
],
"release_date": "2008-07-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Linux kernel local filesystem DoS"
},
{
"cve": "CVE-2008-3525",
"discovery_date": "2008-08-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "460401"
}
],
"notes": [
{
"category": "description",
"text": "The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: missing capability checks in sbni_ioctl()",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-3525"
},
{
"category": "external",
"summary": "RHBZ#460401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=460401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-3525",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-3525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3525"
}
],
"release_date": "2008-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: missing capability checks in sbni_ioctl()"
},
{
"cve": "CVE-2008-4210",
"discovery_date": "2008-09-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "463661"
}
],
"notes": [
{
"category": "description",
"text": "fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: open() call allows setgid bit when user is not in new file\u0027s group",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2008-4210"
},
{
"category": "external",
"summary": "RHBZ#463661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=463661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2008-4210",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4210"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4210"
}
],
"release_date": "2007-05-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2009-01-08T15:47:00+00:00",
"details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
"product_ids": [
"2.1AS:kernel-0:2.4.9-e.74.athlon",
"2.1AS:kernel-0:2.4.9-e.74.i686",
"2.1AS:kernel-0:2.4.9-e.74.src",
"2.1AS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1AS:kernel-debug-0:2.4.9-e.74.i686",
"2.1AS:kernel-doc-0:2.4.9-e.74.i386",
"2.1AS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1AS:kernel-headers-0:2.4.9-e.74.i386",
"2.1AS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1AS:kernel-smp-0:2.4.9-e.74.i686",
"2.1AS:kernel-source-0:2.4.9-e.74.i386",
"2.1AS:kernel-summit-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.athlon",
"2.1ES:kernel-0:2.4.9-e.74.i686",
"2.1ES:kernel-0:2.4.9-e.74.src",
"2.1ES:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1ES:kernel-debug-0:2.4.9-e.74.i686",
"2.1ES:kernel-doc-0:2.4.9-e.74.i386",
"2.1ES:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1ES:kernel-headers-0:2.4.9-e.74.i386",
"2.1ES:kernel-smp-0:2.4.9-e.74.athlon",
"2.1ES:kernel-smp-0:2.4.9-e.74.i686",
"2.1ES:kernel-source-0:2.4.9-e.74.i386",
"2.1ES:kernel-summit-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.athlon",
"2.1WS:kernel-0:2.4.9-e.74.i686",
"2.1WS:kernel-0:2.4.9-e.74.src",
"2.1WS:kernel-BOOT-0:2.4.9-e.74.i386",
"2.1WS:kernel-debug-0:2.4.9-e.74.i686",
"2.1WS:kernel-doc-0:2.4.9-e.74.i386",
"2.1WS:kernel-enterprise-0:2.4.9-e.74.i686",
"2.1WS:kernel-headers-0:2.4.9-e.74.i386",
"2.1WS:kernel-smp-0:2.4.9-e.74.athlon",
"2.1WS:kernel-smp-0:2.4.9-e.74.i686",
"2.1WS:kernel-source-0:2.4.9-e.74.i386",
"2.1WS:kernel-summit-0:2.4.9-e.74.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2009:0001"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: open() call allows setgid bit when user is not in new file\u0027s group"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.