Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2011-2905 (GCVE-0-2011-2905)
Vulnerability from cvelistv5 – Published: 2013-03-01 11:00 – Updated: 2024-08-06 23:15
VLAI?
EPSS
Summary
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T23:15:31.654Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"name": "[oss-security] 20110809 Re: CVE request: perf: may parse user-controlled config file",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-03-01T11:00:00Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"name": "[oss-security] 20110809 Re: CVE request: perf: may parse user-controlled config file",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2011-2905",
"datePublished": "2013-03-01T11:00:00Z",
"dateReserved": "2011-07-27T00:00:00Z",
"dateUpdated": "2024-08-06T23:15:31.654Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.0.68\", \"matchCriteriaId\": \"0C92A087-A5D2-4E23-8113-D110E8C53B58\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"38989541-2360-4E0A-AE5A-3D6144AA6114\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4E51646B-7A0E-40F3-B8C9-239C1DA81DD1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"42A8A507-F8E2-491C-A144-B2448A1DB26E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"901FC6F3-2C2A-4112-AE27-AB102BBE8DEE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"203AD334-DB9F-41B0-A4D1-A6C158EF8C40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B3611753-E440-410F-8250-600C996A4B8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9739BB47-EEAF-42F1-A557-2AE2EA9526A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5A95E3BB-0AFC-4C2E-B9BE-C975E902A266\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"482A6C9A-9B8E-4D1C-917A-F16370745E7C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6D87357-63E0-41D0-9F02-1BCBF9A77E63\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3765A2D6-2D78-4FB1-989E-D5106BFA3F5E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F54257DB-7023-43C4-AC4D-9590B815CD92\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61FF5FCD-A4A1-4803-AC53-320A4C838AF6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9F096553-064F-46A2-877B-F32F163A0F49\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0D762D1-E3AD-40EA-8D39-83EEB51B5E85\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6187D19-7148-4B87-AD7E-244FF9EE0FA6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"99AC64C2-E391-485C-9CD7-BA09C8FA5E63\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8CDA5E95-7805-441B-BEF7-4448EA45E964\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51561053-6C28-4F38-BC9B-3F7A7508EB72\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"118F4A5B-C498-4FC3-BE28-50D18EBE4F22\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD38EBE6-FE1A-4B55-9FB5-07952253B7A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A491E47-82AD-4055-9444-2EC0D6715326\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"13C5FD16-23B6-467F-9438-5B554922F974\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C67235F-5B51-4BF7-89EC-4810F720246F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"08405DEF-05F4-45F0-AC95-DBF914A36D93\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A7B9C4B-4A41-4175-9F07-191C1EE98C1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B306E0A8-4D4A-4895-8128-A500D30A7E0C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"295C839A-F34E-4853-A926-55EABC639412\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AFD5F49-7EF9-4CFE-95BD-8FD19B500B0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"00B3DDDD-B2F6-4753-BA38-65A24017857D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33FCD39E-F4BF-432D-9CF9-F195CF5844F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C7308690-CB0D-4758-B80F-D2ADCD2A9D66\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"313A470B-8A2B-478A-82B5-B27D2718331C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83FF021E-07E3-41CC-AAE8-D99D7FF24B9D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F72412E3-8DA9-4CC9-A426-B534202ADBA4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCAA9D7A-3C3E-4C0B-9D38-EA80E68C2E46\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A9E3AE5-3FCF-4CBB-A30B-082BCFBFB0CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF715657-4C3A-4392-B85D-1BBF4DE45D89\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B63C618-AC3D-4EF7-AFDF-27B9BF482B78\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C33DA5A9-5E40-4365-9602-82FB4DCD15B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EFAFDB74-40BD-46FA-89AC-617EB2C7160B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF5F17DA-30A7-40CF-BD7C-CEDF06D64617\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71A276F5-BD9D-4C1B-90DF-9B0C15B6F7DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F8F6EBEC-3C29-444B-BB85-6EF239B59EC1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.45:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDB91302-FD18-44CF-A8A8-B31483328539\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.46:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B81DC2B-46FA-4640-AD6C-2A404D94BA0B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.47:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA6A1663-BC4C-4FC9-B5EB-A52EDED17B26\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.48:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"69C33D6C-6B9F-49F4-B505-E7B589CDEC50\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.49:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C464796B-2F31-4159-A132-82A0C74137B7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.50:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D6C6E46-FE29-4D2D-A0EC-43DA5112BCC3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.51:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A370E91-73A1-4D62-8E7B-696B920203F8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.52:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"340197CD-9645-4B7E-B976-F3F5A7D4C5BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.53:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"96030636-0C4A-4A10-B768-525D6A0E18CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.54:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A42D8419-914F-4AD6-B0E9-C1290D514FF1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.55:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4E2C88B-42EA-4F4F-B1F6-A9332EC6888B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.56:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2449D13B-3314-4182-832F-03F6B11AA31F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.57:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9A35B66C-F050-4462-A58E-FEE061B5582E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.58:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B551164-0167-49BB-A3AE-4034BDA3DCB4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.59:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7244278E-49B6-4405-A14C-F3540C8F5AF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.60:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4C3E4B8-7274-4ABB-B7CE-6A39C183CE18\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.61:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6501EDB9-4847-47F8-90EE-B295626E4CDC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.62:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D676D48-7521-45E2-8563-6B966FF86A35\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.63:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B69FA17-0AB9-4986-A5A7-2A4C1DD24222\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.64:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BC35593-96C7-41F0-B738-1568F8129121\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.65:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"38D23794-0E7C-4FA5-A7A8-CF940E3FA962\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.66:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"008E1E7D-4C20-4560-9288-EF532ADB0029\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:3.0.67:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B3A7044-A92E-47A9-A7BD-35E5B575F5FD\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de ruta de no confianza en la funci\\u00f3n perf_config en tools/perf/util/config.c en perf, distribuido en el kernel de Linux antes de v3.1, permite a usuarios locales sobreescribir archivos arbitrarios mediante un archivo de configuraci\\u00f3n dise\\u00f1ado en el directorio de trabajo actual.\"}]",
"evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n\u0027CWE-426 Untrusted Search Path\u0027\r\n",
"id": "CVE-2011-2905",
"lastModified": "2024-11-21T01:29:14.703",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:H/Au:N/C:C/I:C/A:C\", \"baseScore\": 6.2, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"HIGH\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 1.9, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2013-03-01T12:37:53.990",
"references": "[{\"url\": \"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/08/09/6\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=729808\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/08/09/6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=729808\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2011-2905\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2013-03-01T12:37:53.990\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de ruta de no confianza en la funci\u00f3n perf_config en tools/perf/util/config.c en perf, distribuido en el kernel de Linux antes de v3.1, permite a usuarios locales sobreescribir archivos arbitrarios mediante un archivo de configuraci\u00f3n dise\u00f1ado en el directorio de trabajo actual.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:H/Au:N/C:C/I:C/A:C\",\"baseScore\":6.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":1.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.0.68\",\"matchCriteriaId\":\"0C92A087-A5D2-4E23-8113-D110E8C53B58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38989541-2360-4E0A-AE5A-3D6144AA6114\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E51646B-7A0E-40F3-B8C9-239C1DA81DD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42A8A507-F8E2-491C-A144-B2448A1DB26E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"901FC6F3-2C2A-4112-AE27-AB102BBE8DEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"203AD334-DB9F-41B0-A4D1-A6C158EF8C40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3611753-E440-410F-8250-600C996A4B8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9739BB47-EEAF-42F1-A557-2AE2EA9526A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A95E3BB-0AFC-4C2E-B9BE-C975E902A266\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"482A6C9A-9B8E-4D1C-917A-F16370745E7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6D87357-63E0-41D0-9F02-1BCBF9A77E63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3765A2D6-2D78-4FB1-989E-D5106BFA3F5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F54257DB-7023-43C4-AC4D-9590B815CD92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61FF5FCD-A4A1-4803-AC53-320A4C838AF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F096553-064F-46A2-877B-F32F163A0F49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0D762D1-E3AD-40EA-8D39-83EEB51B5E85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6187D19-7148-4B87-AD7E-244FF9EE0FA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99AC64C2-E391-485C-9CD7-BA09C8FA5E63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CDA5E95-7805-441B-BEF7-4448EA45E964\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51561053-6C28-4F38-BC9B-3F7A7508EB72\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"118F4A5B-C498-4FC3-BE28-50D18EBE4F22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD38EBE6-FE1A-4B55-9FB5-07952253B7A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A491E47-82AD-4055-9444-2EC0D6715326\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13C5FD16-23B6-467F-9438-5B554922F974\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C67235F-5B51-4BF7-89EC-4810F720246F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08405DEF-05F4-45F0-AC95-DBF914A36D93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A7B9C4B-4A41-4175-9F07-191C1EE98C1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B306E0A8-4D4A-4895-8128-A500D30A7E0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"295C839A-F34E-4853-A926-55EABC639412\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AFD5F49-7EF9-4CFE-95BD-8FD19B500B0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00B3DDDD-B2F6-4753-BA38-65A24017857D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33FCD39E-F4BF-432D-9CF9-F195CF5844F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7308690-CB0D-4758-B80F-D2ADCD2A9D66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"313A470B-8A2B-478A-82B5-B27D2718331C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83FF021E-07E3-41CC-AAE8-D99D7FF24B9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F72412E3-8DA9-4CC9-A426-B534202ADBA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCAA9D7A-3C3E-4C0B-9D38-EA80E68C2E46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A9E3AE5-3FCF-4CBB-A30B-082BCFBFB0CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF715657-4C3A-4392-B85D-1BBF4DE45D89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B63C618-AC3D-4EF7-AFDF-27B9BF482B78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C33DA5A9-5E40-4365-9602-82FB4DCD15B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFAFDB74-40BD-46FA-89AC-617EB2C7160B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF5F17DA-30A7-40CF-BD7C-CEDF06D64617\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71A276F5-BD9D-4C1B-90DF-9B0C15B6F7DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8F6EBEC-3C29-444B-BB85-6EF239B59EC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.45:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDB91302-FD18-44CF-A8A8-B31483328539\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.46:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B81DC2B-46FA-4640-AD6C-2A404D94BA0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.47:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA6A1663-BC4C-4FC9-B5EB-A52EDED17B26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.48:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69C33D6C-6B9F-49F4-B505-E7B589CDEC50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.49:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C464796B-2F31-4159-A132-82A0C74137B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D6C6E46-FE29-4D2D-A0EC-43DA5112BCC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.51:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A370E91-73A1-4D62-8E7B-696B920203F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.52:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"340197CD-9645-4B7E-B976-F3F5A7D4C5BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.53:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96030636-0C4A-4A10-B768-525D6A0E18CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.54:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A42D8419-914F-4AD6-B0E9-C1290D514FF1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.55:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4E2C88B-42EA-4F4F-B1F6-A9332EC6888B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.56:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2449D13B-3314-4182-832F-03F6B11AA31F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.57:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A35B66C-F050-4462-A58E-FEE061B5582E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.58:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B551164-0167-49BB-A3AE-4034BDA3DCB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.59:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7244278E-49B6-4405-A14C-F3540C8F5AF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.60:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4C3E4B8-7274-4ABB-B7CE-6A39C183CE18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.61:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6501EDB9-4847-47F8-90EE-B295626E4CDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.62:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D676D48-7521-45E2-8563-6B966FF86A35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.63:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B69FA17-0AB9-4986-A5A7-2A4C1DD24222\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BC35593-96C7-41F0-B738-1568F8129121\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.65:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38D23794-0E7C-4FA5-A7A8-CF940E3FA962\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.66:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"008E1E7D-4C20-4560-9288-EF532ADB0029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.0.67:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B3A7044-A92E-47A9-A7BD-35E5B575F5FD\"}]}]}],\"references\":[{\"url\":\"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/08/09/6\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=729808\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/08/09/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=729808\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"evaluatorComment\":\"Per: http://cwe.mitre.org/data/definitions/426.html\\r\\n\\r\\n\u0027CWE-426 Untrusted Search Path\u0027\\r\\n\"}}"
}
}
GSD-2011-2905
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2011-2905",
"description": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.",
"id": "GSD-2011-2905",
"references": [
"https://www.suse.com/security/cve/CVE-2011-2905.html",
"https://www.debian.org/security/2011/dsa-2303",
"https://access.redhat.com/errata/RHSA-2011:1465",
"https://alas.aws.amazon.com/cve/html/CVE-2011-2905.html",
"https://linux.oracle.com/cve/CVE-2011-2905.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2011-2905"
],
"details": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.",
"id": "GSD-2011-2905",
"modified": "2023-12-13T01:19:07.451686Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-2905",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1",
"refsource": "MISC",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea",
"refsource": "MISC",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"name": "http://www.openwall.com/lists/oss-security/2011/08/09/6",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
},
{
"name": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea",
"refsource": "MISC",
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=729808",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.63:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.46:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.47:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.48:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.58:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.52:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.51:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.57:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.62:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.49:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.64:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.0.68",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.54:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.55:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.61:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.45:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.67:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.59:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.60:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.56:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.66:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.65:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.53:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.50:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2011-2905"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[oss-security] 20110809 Re: CVE request: perf: may parse user-controlled config file",
"refsource": "MLIST",
"tags": [],
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
},
{
"name": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea",
"refsource": "CONFIRM",
"tags": [],
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=729808",
"refsource": "CONFIRM",
"tags": [],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"name": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea",
"refsource": "MISC",
"tags": [],
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 1.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
}
},
"lastModifiedDate": "2023-02-13T00:19Z",
"publishedDate": "2013-03-01T12:37Z"
}
}
}
RHSA-2011:1465
Vulnerability from csaf_redhat - Published: 2011-11-22 16:36 - Updated: 2025-11-21 17:39Summary
Red Hat Security Advisory: kernel security and bug fix update
Notes
Topic
Updated kernel packages that fix multiple security issues and various bugs
are now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
This update fixes the following security issues:
* IPv6 fragment identification value generation could allow a remote
attacker to disrupt a target system's networking, preventing legitimate
users from accessing its services. (CVE-2011-2699, Important)
* A signedness issue was found in the Linux kernel's CIFS (Common Internet
File System) implementation. A malicious CIFS server could send a
specially-crafted response to a directory read request that would result in
a denial of service or privilege escalation on a system that has a CIFS
share mounted. (CVE-2011-3191, Important)
* A flaw was found in the way the Linux kernel handled fragmented IPv6 UDP
datagrams over the bridge with UDP Fragmentation Offload (UFO)
functionality on. A remote attacker could use this flaw to cause a denial
of service. (CVE-2011-4326, Important)
* The way IPv4 and IPv6 protocol sequence numbers and fragment IDs were
generated could allow a man-in-the-middle attacker to inject packets and
possibly hijack connections. Protocol sequence numbers and fragment IDs are
now more random. (CVE-2011-3188, Moderate)
* A buffer overflow flaw was found in the Linux kernel's FUSE (Filesystem
in Userspace) implementation. A local user in the fuse group who has access
to mount a FUSE file system could use this flaw to cause a denial of
service. (CVE-2011-3353, Moderate)
* A flaw was found in the b43 driver in the Linux kernel. If a system had
an active wireless interface that uses the b43 driver, an attacker able to
send a specially-crafted frame to that interface could cause a denial of
service. (CVE-2011-3359, Moderate)
* A flaw was found in the way CIFS shares with DFS referrals at their root
were handled. An attacker on the local network who is able to deploy a
malicious CIFS server could create a CIFS network share that, when mounted,
would cause the client system to crash. (CVE-2011-3363, Moderate)
* A flaw was found in the way the Linux kernel handled VLAN 0 frames with
the priority tag set. When using certain network drivers, an attacker on
the local network could use this flaw to cause a denial of service.
(CVE-2011-3593, Moderate)
* A flaw in the way memory containing security-related data was handled in
tpm_read() could allow a local, unprivileged user to read the results of a
previously run TPM command. (CVE-2011-1162, Low)
* A heap overflow flaw was found in the Linux kernel's EFI GUID Partition
Table (GPT) implementation. A local attacker could use this flaw to cause
a denial of service by mounting a disk that contains specially-crafted
partition tables. (CVE-2011-1577, Low)
* The I/O statistics from the taskstats subsystem could be read without
any restrictions. A local, unprivileged user could use this flaw to gather
confidential information, such as the length of a password used in a
process. (CVE-2011-2494, Low)
* It was found that the perf tool, a part of the Linux kernel's Performance
Events implementation, could load its configuration file from the current
working directory. If a local user with access to the perf tool were
tricked into running perf in a directory that contains a specially-crafted
configuration file, it could cause perf to overwrite arbitrary files and
directories accessible to that user. (CVE-2011-2905, Low)
Red Hat would like to thank Fernando Gont for reporting CVE-2011-2699;
Darren Lavender for reporting CVE-2011-3191; Dan Kaminsky for reporting
CVE-2011-3188; Yogesh Sharma for reporting CVE-2011-3363; Gideon Naim for
reporting CVE-2011-3593; Peter Huewe for reporting CVE-2011-1162; Timo
Warns for reporting CVE-2011-1577; and Vasiliy Kulikov of Openwall for
reporting CVE-2011-2494.
This update also fixes various bugs. Documentation for these changes will
be available shortly from the Technical Notes document linked to in the
References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages that fix multiple security issues and various bugs\nare now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThis update fixes the following security issues:\n\n* IPv6 fragment identification value generation could allow a remote\nattacker to disrupt a target system\u0027s networking, preventing legitimate\nusers from accessing its services. (CVE-2011-2699, Important)\n\n* A signedness issue was found in the Linux kernel\u0027s CIFS (Common Internet\nFile System) implementation. A malicious CIFS server could send a\nspecially-crafted response to a directory read request that would result in\na denial of service or privilege escalation on a system that has a CIFS\nshare mounted. (CVE-2011-3191, Important)\n\n* A flaw was found in the way the Linux kernel handled fragmented IPv6 UDP\ndatagrams over the bridge with UDP Fragmentation Offload (UFO)\nfunctionality on. A remote attacker could use this flaw to cause a denial\nof service. (CVE-2011-4326, Important)\n\n* The way IPv4 and IPv6 protocol sequence numbers and fragment IDs were\ngenerated could allow a man-in-the-middle attacker to inject packets and\npossibly hijack connections. Protocol sequence numbers and fragment IDs are\nnow more random. (CVE-2011-3188, Moderate)\n\n* A buffer overflow flaw was found in the Linux kernel\u0027s FUSE (Filesystem\nin Userspace) implementation. A local user in the fuse group who has access\nto mount a FUSE file system could use this flaw to cause a denial of\nservice. (CVE-2011-3353, Moderate)\n\n* A flaw was found in the b43 driver in the Linux kernel. If a system had\nan active wireless interface that uses the b43 driver, an attacker able to\nsend a specially-crafted frame to that interface could cause a denial of\nservice. (CVE-2011-3359, Moderate)\n\n* A flaw was found in the way CIFS shares with DFS referrals at their root\nwere handled. An attacker on the local network who is able to deploy a\nmalicious CIFS server could create a CIFS network share that, when mounted,\nwould cause the client system to crash. (CVE-2011-3363, Moderate)\n\n* A flaw was found in the way the Linux kernel handled VLAN 0 frames with\nthe priority tag set. When using certain network drivers, an attacker on\nthe local network could use this flaw to cause a denial of service.\n(CVE-2011-3593, Moderate)\n\n* A flaw in the way memory containing security-related data was handled in\ntpm_read() could allow a local, unprivileged user to read the results of a\npreviously run TPM command. (CVE-2011-1162, Low)\n\n* A heap overflow flaw was found in the Linux kernel\u0027s EFI GUID Partition\nTable (GPT) implementation. A local attacker could use this flaw to cause\na denial of service by mounting a disk that contains specially-crafted\npartition tables. (CVE-2011-1577, Low)\n\n* The I/O statistics from the taskstats subsystem could be read without\nany restrictions. A local, unprivileged user could use this flaw to gather\nconfidential information, such as the length of a password used in a\nprocess. (CVE-2011-2494, Low)\n\n* It was found that the perf tool, a part of the Linux kernel\u0027s Performance\nEvents implementation, could load its configuration file from the current\nworking directory. If a local user with access to the perf tool were\ntricked into running perf in a directory that contains a specially-crafted\nconfiguration file, it could cause perf to overwrite arbitrary files and\ndirectories accessible to that user. (CVE-2011-2905, Low)\n\nRed Hat would like to thank Fernando Gont for reporting CVE-2011-2699;\nDarren Lavender for reporting CVE-2011-3191; Dan Kaminsky for reporting\nCVE-2011-3188; Yogesh Sharma for reporting CVE-2011-3363; Gideon Naim for\nreporting CVE-2011-3593; Peter Huewe for reporting CVE-2011-1162; Timo\nWarns for reporting CVE-2011-1577; and Vasiliy Kulikov of Openwall for\nreporting CVE-2011-2494.\n\nThis update also fixes various bugs. Documentation for these changes will\nbe available shortly from the Technical Notes document linked to in the\nReferences section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2011:1465",
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html#RHSA-2011-1465",
"url": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html#RHSA-2011-1465"
},
{
"category": "external",
"summary": "695976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=695976"
},
{
"category": "external",
"summary": "716842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716842"
},
{
"category": "external",
"summary": "723429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=723429"
},
{
"category": "external",
"summary": "729808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"category": "external",
"summary": "732629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732629"
},
{
"category": "external",
"summary": "732658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732658"
},
{
"category": "external",
"summary": "732869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732869"
},
{
"category": "external",
"summary": "736761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736761"
},
{
"category": "external",
"summary": "738202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738202"
},
{
"category": "external",
"summary": "738291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738291"
},
{
"category": "external",
"summary": "740352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=740352"
},
{
"category": "external",
"summary": "741166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=741166"
},
{
"category": "external",
"summary": "742846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=742846"
},
{
"category": "external",
"summary": "743807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=743807"
},
{
"category": "external",
"summary": "744811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=744811"
},
{
"category": "external",
"summary": "748808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=748808"
},
{
"category": "external",
"summary": "755584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=755584"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1465.json"
}
],
"title": "Red Hat Security Advisory: kernel security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:39:14+00:00",
"generator": {
"date": "2025-11-21T17:39:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2011:1465",
"initial_release_date": "2011-11-22T16:36:00+00:00",
"revision_history": [
{
"date": "2011-11-22T16:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2011-11-22T16:45:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:39:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-i686@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.i686",
"product_id": "perf-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-bootwrapper@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "perf-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.s390x",
"product_id": "perf-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-devel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "perf-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.src",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.src",
"product_id": "kernel-0:2.6.32-131.21.1.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"product": {
"name": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"product_id": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-firmware@2.6.32-131.21.1.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"product": {
"name": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"product_id": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.6.32-131.21.1.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.src",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.6.32-131.21.1.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch"
},
"product_reference": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch"
},
"product_reference": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Peter Huewe"
]
}
],
"cve": "CVE-2011-1162",
"discovery_date": "2011-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732629"
}
],
"notes": [
{
"category": "description",
"text": "The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: tpm: infoleak",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1162"
},
{
"category": "external",
"summary": "RHBZ#732629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1162",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1162"
}
],
"release_date": "2011-03-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.2,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: tpm: infoleak"
},
{
"acknowledgments": [
{
"names": [
"Timo Warns"
]
}
],
"cve": "CVE-2011-1577",
"discovery_date": "2011-04-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "695976"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: corrupted GUID partition tables can cause kernel oops",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0833.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1577"
},
{
"category": "external",
"summary": "RHBZ#695976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=695976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1577",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1577"
}
],
"release_date": "2011-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: corrupted GUID partition tables can cause kernel oops"
},
{
"acknowledgments": [
{
"names": [
"Vasiliy Kulikov"
],
"organization": "Openwall"
}
],
"cve": "CVE-2011-2494",
"discovery_date": "2011-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "716842"
}
],
"notes": [
{
"category": "description",
"text": "kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user\u0027s password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: taskstats io infoleak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not provide support for the Taskstats interface. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2494"
},
{
"category": "external",
"summary": "RHBZ#716842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716842"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2494",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2494"
}
],
"release_date": "2011-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: taskstats io infoleak"
},
{
"acknowledgments": [
{
"names": [
"Fernando Gont"
]
}
],
"cve": "CVE-2011-2699",
"discovery_date": "2011-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "723429"
}
],
"notes": [
{
"category": "description",
"text": "The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipv6: make fragment identifications less predictable",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the Linux kernel as shipped with Red Hat Enterprise MRG as it has backported the fix that addresses this issue. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-1386.html and https://rhn.redhat.com/errata/RHSA-2011-1465.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2699"
},
{
"category": "external",
"summary": "RHBZ#723429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=723429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2699",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2699"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2699",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2699"
}
],
"release_date": "2011-07-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: ipv6: make fragment identifications less predictable"
},
{
"cve": "CVE-2011-2905",
"discovery_date": "2011-08-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "729808"
}
],
"notes": [
{
"category": "description",
"text": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: perf tools: may parse user-controlled configuration file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect Red Hat Enterprise Linux 4 and 5 as they did not include support for perf. This did not affect Red Hat Enterprise MRG as it uses the perf package from Red Hat Enterprise Linux 6. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1465.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2905"
},
{
"category": "external",
"summary": "RHBZ#729808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2905",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2905"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2905",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2905"
}
],
"release_date": "2011-08-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: perf tools: may parse user-controlled configuration file"
},
{
"acknowledgments": [
{
"names": [
"Dan Kaminsky"
]
}
],
"cve": "CVE-2011-3188",
"discovery_date": "2011-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732658"
}
],
"notes": [
{
"category": "description",
"text": "The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: improve sequence number generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3188"
},
{
"category": "external",
"summary": "RHBZ#732658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732658"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3188",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3188"
}
],
"release_date": "2011-08-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net: improve sequence number generation"
},
{
"acknowledgments": [
{
"names": [
"Darren Lavender"
]
}
],
"cve": "CVE-2011-3191",
"discovery_date": "2011-08-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732869"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: cifs: signedness issue in CIFSFindNext()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3191"
},
{
"category": "external",
"summary": "RHBZ#732869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3191",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3191"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3191",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3191"
}
],
"release_date": "2011-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: cifs: signedness issue in CIFSFindNext()"
},
{
"cve": "CVE-2011-3353",
"discovery_date": "2011-08-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "736761"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as they did not provide support for FUSE. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 as they did not backport the upstream commit 3b463ae0c6264f that introduced this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3353"
},
{
"category": "external",
"summary": "RHBZ#736761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3353",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3353"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3353",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3353"
}
],
"release_date": "2011-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message"
},
{
"cve": "CVE-2011-3359",
"discovery_date": "2011-03-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "738202"
}
],
"notes": [
{
"category": "description",
"text": "The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: b43: allocate receive buffers big enough for max frame len + offset",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of the Linux kernel as shipped with Red\nHat Enterprise Linux 4 and 5 as they did not provide support for Broadcom 43xx wireless devices. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3359"
},
{
"category": "external",
"summary": "RHBZ#738202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3359",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3359"
}
],
"release_date": "2011-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: b43: allocate receive buffers big enough for max frame len + offset"
},
{
"acknowledgments": [
{
"names": [
"Yogesh Sharma"
]
}
],
"cve": "CVE-2011-3363",
"discovery_date": "2011-03-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "738291"
}
],
"notes": [
{
"category": "description",
"text": "The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: cifs: always do is_path_accessible check in cifs_mount",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,\n5, 6, and Red Hat Enterprise MRG. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3363"
},
{
"category": "external",
"summary": "RHBZ#738291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3363",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3363"
}
],
"release_date": "2011-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: cifs: always do is_path_accessible check in cifs_mount"
},
{
"acknowledgments": [
{
"names": [
"Gideon Naim"
]
}
],
"cve": "CVE-2011-3593",
"discovery_date": "2011-10-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "742846"
}
],
"notes": [
{
"category": "description",
"text": "A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: vlan: fix panic when handling priority tagged frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG. It affects the Linux kernel as shipped with Red Hat Enterprise Linux 6 due to incorrect backporting of upstream patches. A future kernel update in Red Hat Enterprise Linux 6 may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3593"
},
{
"category": "external",
"summary": "RHBZ#742846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=742846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3593",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3593"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3593",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3593"
}
],
"release_date": "2011-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 5.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: vlan: fix panic when handling priority tagged frames"
},
{
"cve": "CVE-2011-4326",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2011-03-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "755584"
}
],
"notes": [
{
"category": "description",
"text": "The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wrong headroom check in udp6_ufo_fragment()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 and 5 as they did not provide support for UDP Fragmentation Offload (UFO) functionality. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-4326"
},
{
"category": "external",
"summary": "RHBZ#755584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=755584"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-4326",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4326"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4326",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4326"
}
],
"release_date": "2011-03-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: wrong headroom check in udp6_ufo_fragment()"
}
]
}
RHSA-2011_1465
Vulnerability from csaf_redhat - Published: 2011-11-22 16:36 - Updated: 2024-11-22 05:00Summary
Red Hat Security Advisory: kernel security and bug fix update
Notes
Topic
Updated kernel packages that fix multiple security issues and various bugs
are now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
This update fixes the following security issues:
* IPv6 fragment identification value generation could allow a remote
attacker to disrupt a target system's networking, preventing legitimate
users from accessing its services. (CVE-2011-2699, Important)
* A signedness issue was found in the Linux kernel's CIFS (Common Internet
File System) implementation. A malicious CIFS server could send a
specially-crafted response to a directory read request that would result in
a denial of service or privilege escalation on a system that has a CIFS
share mounted. (CVE-2011-3191, Important)
* A flaw was found in the way the Linux kernel handled fragmented IPv6 UDP
datagrams over the bridge with UDP Fragmentation Offload (UFO)
functionality on. A remote attacker could use this flaw to cause a denial
of service. (CVE-2011-4326, Important)
* The way IPv4 and IPv6 protocol sequence numbers and fragment IDs were
generated could allow a man-in-the-middle attacker to inject packets and
possibly hijack connections. Protocol sequence numbers and fragment IDs are
now more random. (CVE-2011-3188, Moderate)
* A buffer overflow flaw was found in the Linux kernel's FUSE (Filesystem
in Userspace) implementation. A local user in the fuse group who has access
to mount a FUSE file system could use this flaw to cause a denial of
service. (CVE-2011-3353, Moderate)
* A flaw was found in the b43 driver in the Linux kernel. If a system had
an active wireless interface that uses the b43 driver, an attacker able to
send a specially-crafted frame to that interface could cause a denial of
service. (CVE-2011-3359, Moderate)
* A flaw was found in the way CIFS shares with DFS referrals at their root
were handled. An attacker on the local network who is able to deploy a
malicious CIFS server could create a CIFS network share that, when mounted,
would cause the client system to crash. (CVE-2011-3363, Moderate)
* A flaw was found in the way the Linux kernel handled VLAN 0 frames with
the priority tag set. When using certain network drivers, an attacker on
the local network could use this flaw to cause a denial of service.
(CVE-2011-3593, Moderate)
* A flaw in the way memory containing security-related data was handled in
tpm_read() could allow a local, unprivileged user to read the results of a
previously run TPM command. (CVE-2011-1162, Low)
* A heap overflow flaw was found in the Linux kernel's EFI GUID Partition
Table (GPT) implementation. A local attacker could use this flaw to cause
a denial of service by mounting a disk that contains specially-crafted
partition tables. (CVE-2011-1577, Low)
* The I/O statistics from the taskstats subsystem could be read without
any restrictions. A local, unprivileged user could use this flaw to gather
confidential information, such as the length of a password used in a
process. (CVE-2011-2494, Low)
* It was found that the perf tool, a part of the Linux kernel's Performance
Events implementation, could load its configuration file from the current
working directory. If a local user with access to the perf tool were
tricked into running perf in a directory that contains a specially-crafted
configuration file, it could cause perf to overwrite arbitrary files and
directories accessible to that user. (CVE-2011-2905, Low)
Red Hat would like to thank Fernando Gont for reporting CVE-2011-2699;
Darren Lavender for reporting CVE-2011-3191; Dan Kaminsky for reporting
CVE-2011-3188; Yogesh Sharma for reporting CVE-2011-3363; Gideon Naim for
reporting CVE-2011-3593; Peter Huewe for reporting CVE-2011-1162; Timo
Warns for reporting CVE-2011-1577; and Vasiliy Kulikov of Openwall for
reporting CVE-2011-2494.
This update also fixes various bugs. Documentation for these changes will
be available shortly from the Technical Notes document linked to in the
References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages that fix multiple security issues and various bugs\nare now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThis update fixes the following security issues:\n\n* IPv6 fragment identification value generation could allow a remote\nattacker to disrupt a target system\u0027s networking, preventing legitimate\nusers from accessing its services. (CVE-2011-2699, Important)\n\n* A signedness issue was found in the Linux kernel\u0027s CIFS (Common Internet\nFile System) implementation. A malicious CIFS server could send a\nspecially-crafted response to a directory read request that would result in\na denial of service or privilege escalation on a system that has a CIFS\nshare mounted. (CVE-2011-3191, Important)\n\n* A flaw was found in the way the Linux kernel handled fragmented IPv6 UDP\ndatagrams over the bridge with UDP Fragmentation Offload (UFO)\nfunctionality on. A remote attacker could use this flaw to cause a denial\nof service. (CVE-2011-4326, Important)\n\n* The way IPv4 and IPv6 protocol sequence numbers and fragment IDs were\ngenerated could allow a man-in-the-middle attacker to inject packets and\npossibly hijack connections. Protocol sequence numbers and fragment IDs are\nnow more random. (CVE-2011-3188, Moderate)\n\n* A buffer overflow flaw was found in the Linux kernel\u0027s FUSE (Filesystem\nin Userspace) implementation. A local user in the fuse group who has access\nto mount a FUSE file system could use this flaw to cause a denial of\nservice. (CVE-2011-3353, Moderate)\n\n* A flaw was found in the b43 driver in the Linux kernel. If a system had\nan active wireless interface that uses the b43 driver, an attacker able to\nsend a specially-crafted frame to that interface could cause a denial of\nservice. (CVE-2011-3359, Moderate)\n\n* A flaw was found in the way CIFS shares with DFS referrals at their root\nwere handled. An attacker on the local network who is able to deploy a\nmalicious CIFS server could create a CIFS network share that, when mounted,\nwould cause the client system to crash. (CVE-2011-3363, Moderate)\n\n* A flaw was found in the way the Linux kernel handled VLAN 0 frames with\nthe priority tag set. When using certain network drivers, an attacker on\nthe local network could use this flaw to cause a denial of service.\n(CVE-2011-3593, Moderate)\n\n* A flaw in the way memory containing security-related data was handled in\ntpm_read() could allow a local, unprivileged user to read the results of a\npreviously run TPM command. (CVE-2011-1162, Low)\n\n* A heap overflow flaw was found in the Linux kernel\u0027s EFI GUID Partition\nTable (GPT) implementation. A local attacker could use this flaw to cause\na denial of service by mounting a disk that contains specially-crafted\npartition tables. (CVE-2011-1577, Low)\n\n* The I/O statistics from the taskstats subsystem could be read without\nany restrictions. A local, unprivileged user could use this flaw to gather\nconfidential information, such as the length of a password used in a\nprocess. (CVE-2011-2494, Low)\n\n* It was found that the perf tool, a part of the Linux kernel\u0027s Performance\nEvents implementation, could load its configuration file from the current\nworking directory. If a local user with access to the perf tool were\ntricked into running perf in a directory that contains a specially-crafted\nconfiguration file, it could cause perf to overwrite arbitrary files and\ndirectories accessible to that user. (CVE-2011-2905, Low)\n\nRed Hat would like to thank Fernando Gont for reporting CVE-2011-2699;\nDarren Lavender for reporting CVE-2011-3191; Dan Kaminsky for reporting\nCVE-2011-3188; Yogesh Sharma for reporting CVE-2011-3363; Gideon Naim for\nreporting CVE-2011-3593; Peter Huewe for reporting CVE-2011-1162; Timo\nWarns for reporting CVE-2011-1577; and Vasiliy Kulikov of Openwall for\nreporting CVE-2011-2494.\n\nThis update also fixes various bugs. Documentation for these changes will\nbe available shortly from the Technical Notes document linked to in the\nReferences section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2011:1465",
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html#RHSA-2011-1465",
"url": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html#RHSA-2011-1465"
},
{
"category": "external",
"summary": "695976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=695976"
},
{
"category": "external",
"summary": "716842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716842"
},
{
"category": "external",
"summary": "723429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=723429"
},
{
"category": "external",
"summary": "729808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"category": "external",
"summary": "732629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732629"
},
{
"category": "external",
"summary": "732658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732658"
},
{
"category": "external",
"summary": "732869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732869"
},
{
"category": "external",
"summary": "736761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736761"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "738291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738291"
},
{
"category": "external",
"summary": "740352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=740352"
},
{
"category": "external",
"summary": "741166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=741166"
},
{
"category": "external",
"summary": "742846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=742846"
},
{
"category": "external",
"summary": "743807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=743807"
},
{
"category": "external",
"summary": "744811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=744811"
},
{
"category": "external",
"summary": "748808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=748808"
},
{
"category": "external",
"summary": "755584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=755584"
},
{
"category": "external",
"summary": "738202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738202"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1465.json"
}
],
"title": "Red Hat Security Advisory: kernel security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T05:00:13+00:00",
"generator": {
"date": "2024-11-22T05:00:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2011:1465",
"initial_release_date": "2011-11-22T16:36:00+00:00",
"revision_history": [
{
"date": "2011-11-22T16:36:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2011-11-22T16:45:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:00:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-i686@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.i686",
"product_id": "perf-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-bootwrapper@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "perf-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.s390x",
"product_id": "perf-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-devel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "perf-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "perf-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.21.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.21.1.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.21.1.el6.src",
"product": {
"name": "kernel-0:2.6.32-131.21.1.el6.src",
"product_id": "kernel-0:2.6.32-131.21.1.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.21.1.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"product": {
"name": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"product_id": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-firmware@2.6.32-131.21.1.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"product": {
"name": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"product_id": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.6.32-131.21.1.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.src",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.6.32-131.21.1.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch"
},
"product_reference": "kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch"
},
"product_reference": "kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "perf-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Peter Huewe"
]
}
],
"cve": "CVE-2011-1162",
"discovery_date": "2011-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732629"
}
],
"notes": [
{
"category": "description",
"text": "The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: tpm: infoleak",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1162"
},
{
"category": "external",
"summary": "RHBZ#732629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1162",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1162"
}
],
"release_date": "2011-03-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.2,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: tpm: infoleak"
},
{
"acknowledgments": [
{
"names": [
"Timo Warns"
]
}
],
"cve": "CVE-2011-1577",
"discovery_date": "2011-04-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "695976"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: corrupted GUID partition tables can cause kernel oops",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0833.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1577"
},
{
"category": "external",
"summary": "RHBZ#695976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=695976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1577",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1577"
}
],
"release_date": "2011-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: corrupted GUID partition tables can cause kernel oops"
},
{
"acknowledgments": [
{
"names": [
"Vasiliy Kulikov"
],
"organization": "Openwall"
}
],
"cve": "CVE-2011-2494",
"discovery_date": "2011-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "716842"
}
],
"notes": [
{
"category": "description",
"text": "kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user\u0027s password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: taskstats io infoleak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not provide support for the Taskstats interface. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2494"
},
{
"category": "external",
"summary": "RHBZ#716842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716842"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2494",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2494"
}
],
"release_date": "2011-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: taskstats io infoleak"
},
{
"acknowledgments": [
{
"names": [
"Fernando Gont"
]
}
],
"cve": "CVE-2011-2699",
"discovery_date": "2011-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "723429"
}
],
"notes": [
{
"category": "description",
"text": "The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ipv6: make fragment identifications less predictable",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the Linux kernel as shipped with Red Hat Enterprise MRG as it has backported the fix that addresses this issue. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-1386.html and https://rhn.redhat.com/errata/RHSA-2011-1465.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2699"
},
{
"category": "external",
"summary": "RHBZ#723429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=723429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2699",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2699"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2699",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2699"
}
],
"release_date": "2011-07-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: ipv6: make fragment identifications less predictable"
},
{
"cve": "CVE-2011-2905",
"discovery_date": "2011-08-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "729808"
}
],
"notes": [
{
"category": "description",
"text": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: perf tools: may parse user-controlled configuration file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect Red Hat Enterprise Linux 4 and 5 as they did not include support for perf. This did not affect Red Hat Enterprise MRG as it uses the perf package from Red Hat Enterprise Linux 6. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1465.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2905"
},
{
"category": "external",
"summary": "RHBZ#729808",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2905",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2905"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2905",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2905"
}
],
"release_date": "2011-08-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: perf tools: may parse user-controlled configuration file"
},
{
"acknowledgments": [
{
"names": [
"Dan Kaminsky"
]
}
],
"cve": "CVE-2011-3188",
"discovery_date": "2011-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732658"
}
],
"notes": [
{
"category": "description",
"text": "The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: improve sequence number generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3188"
},
{
"category": "external",
"summary": "RHBZ#732658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732658"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3188",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3188"
}
],
"release_date": "2011-08-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net: improve sequence number generation"
},
{
"acknowledgments": [
{
"names": [
"Darren Lavender"
]
}
],
"cve": "CVE-2011-3191",
"discovery_date": "2011-08-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732869"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: cifs: signedness issue in CIFSFindNext()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3191"
},
{
"category": "external",
"summary": "RHBZ#732869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3191",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3191"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3191",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3191"
}
],
"release_date": "2011-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: cifs: signedness issue in CIFSFindNext()"
},
{
"cve": "CVE-2011-3353",
"discovery_date": "2011-08-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "736761"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as they did not provide support for FUSE. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 as they did not backport the upstream commit 3b463ae0c6264f that introduced this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3353"
},
{
"category": "external",
"summary": "RHBZ#736761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3353",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3353"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3353",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3353"
}
],
"release_date": "2011-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message"
},
{
"cve": "CVE-2011-3359",
"discovery_date": "2011-03-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "738202"
}
],
"notes": [
{
"category": "description",
"text": "The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: b43: allocate receive buffers big enough for max frame len + offset",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of the Linux kernel as shipped with Red\nHat Enterprise Linux 4 and 5 as they did not provide support for Broadcom 43xx wireless devices. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3359"
},
{
"category": "external",
"summary": "RHBZ#738202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3359",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3359"
}
],
"release_date": "2011-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: b43: allocate receive buffers big enough for max frame len + offset"
},
{
"acknowledgments": [
{
"names": [
"Yogesh Sharma"
]
}
],
"cve": "CVE-2011-3363",
"discovery_date": "2011-03-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "738291"
}
],
"notes": [
{
"category": "description",
"text": "The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: cifs: always do is_path_accessible check in cifs_mount",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,\n5, 6, and Red Hat Enterprise MRG. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3363"
},
{
"category": "external",
"summary": "RHBZ#738291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3363",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3363"
}
],
"release_date": "2011-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: cifs: always do is_path_accessible check in cifs_mount"
},
{
"acknowledgments": [
{
"names": [
"Gideon Naim"
]
}
],
"cve": "CVE-2011-3593",
"discovery_date": "2011-10-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "742846"
}
],
"notes": [
{
"category": "description",
"text": "A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: vlan: fix panic when handling priority tagged frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG. It affects the Linux kernel as shipped with Red Hat Enterprise Linux 6 due to incorrect backporting of upstream patches. A future kernel update in Red Hat Enterprise Linux 6 may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3593"
},
{
"category": "external",
"summary": "RHBZ#742846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=742846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3593",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3593"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3593",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3593"
}
],
"release_date": "2011-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 5.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: vlan: fix panic when handling priority tagged frames"
},
{
"cve": "CVE-2011-4326",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2011-03-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "755584"
}
],
"notes": [
{
"category": "description",
"text": "The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wrong headroom check in udp6_ufo_fragment()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 and 5 as they did not provide support for UDP Fragmentation Offload (UFO) functionality. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-4326"
},
{
"category": "external",
"summary": "RHBZ#755584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=755584"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-4326",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4326"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4326",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4326"
}
],
"release_date": "2011-03-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2011-11-22T16:36:00+00:00",
"details": "Users should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1465"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.21.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.21.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.21.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: wrong headroom check in udp6_ufo_fragment()"
}
]
}
GHSA-4WV3-Q9V5-FP5M
Vulnerability from github – Published: 2022-05-17 05:14 – Updated: 2022-05-17 05:14
VLAI?
Details
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
{
"affected": [],
"aliases": [
"CVE-2011-2905"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2013-03-01T12:37:00Z",
"severity": "MODERATE"
},
"details": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.",
"id": "GHSA-4wv3-q9v5-fp5m",
"modified": "2022-05-17T05:14:16Z",
"published": "2022-05-17T05:14:16Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2905"
},
{
"type": "WEB",
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"type": "WEB",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"type": "WEB",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"type": "WEB",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
}
],
"schema_version": "1.4.0",
"severity": []
}
FKIE_CVE-2011-2905
Vulnerability from fkie_nvd - Published: 2013-03-01 12:37 - Updated: 2025-04-11 00:51
Severity ?
Summary
Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0C92A087-A5D2-4E23-8113-D110E8C53B58",
"versionEndIncluding": "3.0.68",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "38989541-2360-4E0A-AE5A-3D6144AA6114",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4E51646B-7A0E-40F3-B8C9-239C1DA81DD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "42A8A507-F8E2-491C-A144-B2448A1DB26E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "901FC6F3-2C2A-4112-AE27-AB102BBE8DEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "203AD334-DB9F-41B0-A4D1-A6C158EF8C40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B3611753-E440-410F-8250-600C996A4B8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "9739BB47-EEAF-42F1-A557-2AE2EA9526A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "5A95E3BB-0AFC-4C2E-B9BE-C975E902A266",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "482A6C9A-9B8E-4D1C-917A-F16370745E7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "C6D87357-63E0-41D0-9F02-1BCBF9A77E63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "3765A2D6-2D78-4FB1-989E-D5106BFA3F5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "F54257DB-7023-43C4-AC4D-9590B815CD92",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "61FF5FCD-A4A1-4803-AC53-320A4C838AF6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "9F096553-064F-46A2-877B-F32F163A0F49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*",
"matchCriteriaId": "C0D762D1-E3AD-40EA-8D39-83EEB51B5E85",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*",
"matchCriteriaId": "A6187D19-7148-4B87-AD7E-244FF9EE0FA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*",
"matchCriteriaId": "99AC64C2-E391-485C-9CD7-BA09C8FA5E63",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*",
"matchCriteriaId": "8CDA5E95-7805-441B-BEF7-4448EA45E964",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "51561053-6C28-4F38-BC9B-3F7A7508EB72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*",
"matchCriteriaId": "118F4A5B-C498-4FC3-BE28-50D18EBE4F22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*",
"matchCriteriaId": "BD38EBE6-FE1A-4B55-9FB5-07952253B7A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*",
"matchCriteriaId": "3A491E47-82AD-4055-9444-2EC0D6715326",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*",
"matchCriteriaId": "13C5FD16-23B6-467F-9438-5B554922F974",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*",
"matchCriteriaId": "9C67235F-5B51-4BF7-89EC-4810F720246F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*",
"matchCriteriaId": "08405DEF-05F4-45F0-AC95-DBF914A36D93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*",
"matchCriteriaId": "1A7B9C4B-4A41-4175-9F07-191C1EE98C1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*",
"matchCriteriaId": "B306E0A8-4D4A-4895-8128-A500D30A7E0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*",
"matchCriteriaId": "295C839A-F34E-4853-A926-55EABC639412",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*",
"matchCriteriaId": "2AFD5F49-7EF9-4CFE-95BD-8FD19B500B0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*",
"matchCriteriaId": "00B3DDDD-B2F6-4753-BA38-65A24017857D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*",
"matchCriteriaId": "33FCD39E-F4BF-432D-9CF9-F195CF5844F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*",
"matchCriteriaId": "C7308690-CB0D-4758-B80F-D2ADCD2A9D66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*",
"matchCriteriaId": "313A470B-8A2B-478A-82B5-B27D2718331C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*",
"matchCriteriaId": "83FF021E-07E3-41CC-AAE8-D99D7FF24B9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*",
"matchCriteriaId": "F72412E3-8DA9-4CC9-A426-B534202ADBA4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*",
"matchCriteriaId": "FCAA9D7A-3C3E-4C0B-9D38-EA80E68C2E46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*",
"matchCriteriaId": "4A9E3AE5-3FCF-4CBB-A30B-082BCFBFB0CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*",
"matchCriteriaId": "CF715657-4C3A-4392-B85D-1BBF4DE45D89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*",
"matchCriteriaId": "4B63C618-AC3D-4EF7-AFDF-27B9BF482B78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*",
"matchCriteriaId": "C33DA5A9-5E40-4365-9602-82FB4DCD15B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*",
"matchCriteriaId": "EFAFDB74-40BD-46FA-89AC-617EB2C7160B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*",
"matchCriteriaId": "CF5F17DA-30A7-40CF-BD7C-CEDF06D64617",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*",
"matchCriteriaId": "71A276F5-BD9D-4C1B-90DF-9B0C15B6F7DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*",
"matchCriteriaId": "F8F6EBEC-3C29-444B-BB85-6EF239B59EC1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.45:*:*:*:*:*:*:*",
"matchCriteriaId": "FDB91302-FD18-44CF-A8A8-B31483328539",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.46:*:*:*:*:*:*:*",
"matchCriteriaId": "9B81DC2B-46FA-4640-AD6C-2A404D94BA0B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.47:*:*:*:*:*:*:*",
"matchCriteriaId": "BA6A1663-BC4C-4FC9-B5EB-A52EDED17B26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.48:*:*:*:*:*:*:*",
"matchCriteriaId": "69C33D6C-6B9F-49F4-B505-E7B589CDEC50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.49:*:*:*:*:*:*:*",
"matchCriteriaId": "C464796B-2F31-4159-A132-82A0C74137B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.50:*:*:*:*:*:*:*",
"matchCriteriaId": "1D6C6E46-FE29-4D2D-A0EC-43DA5112BCC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.51:*:*:*:*:*:*:*",
"matchCriteriaId": "1A370E91-73A1-4D62-8E7B-696B920203F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.52:*:*:*:*:*:*:*",
"matchCriteriaId": "340197CD-9645-4B7E-B976-F3F5A7D4C5BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.53:*:*:*:*:*:*:*",
"matchCriteriaId": "96030636-0C4A-4A10-B768-525D6A0E18CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.54:*:*:*:*:*:*:*",
"matchCriteriaId": "A42D8419-914F-4AD6-B0E9-C1290D514FF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.55:*:*:*:*:*:*:*",
"matchCriteriaId": "F4E2C88B-42EA-4F4F-B1F6-A9332EC6888B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.56:*:*:*:*:*:*:*",
"matchCriteriaId": "2449D13B-3314-4182-832F-03F6B11AA31F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.57:*:*:*:*:*:*:*",
"matchCriteriaId": "9A35B66C-F050-4462-A58E-FEE061B5582E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.58:*:*:*:*:*:*:*",
"matchCriteriaId": "1B551164-0167-49BB-A3AE-4034BDA3DCB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.59:*:*:*:*:*:*:*",
"matchCriteriaId": "7244278E-49B6-4405-A14C-F3540C8F5AF8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.60:*:*:*:*:*:*:*",
"matchCriteriaId": "B4C3E4B8-7274-4ABB-B7CE-6A39C183CE18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.61:*:*:*:*:*:*:*",
"matchCriteriaId": "6501EDB9-4847-47F8-90EE-B295626E4CDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.62:*:*:*:*:*:*:*",
"matchCriteriaId": "2D676D48-7521-45E2-8563-6B966FF86A35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.63:*:*:*:*:*:*:*",
"matchCriteriaId": "3B69FA17-0AB9-4986-A5A7-2A4C1DD24222",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.64:*:*:*:*:*:*:*",
"matchCriteriaId": "7BC35593-96C7-41F0-B738-1568F8129121",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.65:*:*:*:*:*:*:*",
"matchCriteriaId": "38D23794-0E7C-4FA5-A7A8-CF940E3FA962",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.66:*:*:*:*:*:*:*",
"matchCriteriaId": "008E1E7D-4C20-4560-9288-EF532ADB0029",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:3.0.67:*:*:*:*:*:*:*",
"matchCriteriaId": "3B3A7044-A92E-47A9-A7BD-35E5B575F5FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory."
},
{
"lang": "es",
"value": "Vulnerabilidad de ruta de no confianza en la funci\u00f3n perf_config en tools/perf/util/config.c en perf, distribuido en el kernel de Linux antes de v3.1, permite a usuarios locales sobreescribir archivos arbitrarios mediante un archivo de configuraci\u00f3n dise\u00f1ado en el directorio de trabajo actual."
}
],
"evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n\u0027CWE-426 Untrusted Search Path\u0027\r\n",
"id": "CVE-2011-2905",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 1.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2013-03-01T12:37:53.990",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"source": "secalert@redhat.com",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"source": "secalert@redhat.com",
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aba8d056078e47350d85b06a9cabd5afcc4b72ea"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2011/08/09/6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=729808"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://github.com/torvalds/linux/commit/aba8d056078e47350d85b06a9cabd5afcc4b72ea"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…