rhsa-2010_0771
Vulnerability from csaf_redhat
Published
2010-10-14 15:26
Modified
2024-11-05 17:21
Summary
Red Hat Security Advisory: kernel-rt security and bug fix update
Notes
Topic
Updated kernel-rt packages that fix multiple security issues and upgrade
the kernel-rt kernel to version 2.6.33.7-rt29 are now available for Red Hat
Enterprise MRG 1.3.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
The kernel-rt packages contain the Linux kernel, the core of any Linux
operating system.
This update fixes the following security issues:
* On AMD64 systems, it was discovered that the kernel did not ensure the
ELF interpreter was available before making a call to the SET_PERSONALITY
macro. A local attacker could use this flaw to cause a denial of service by
running a 32-bit application that attempts to execute a 64-bit application.
(CVE-2010-0307, Moderate)
* Information leak flaws were found in the Linux kernel Traffic Control
Unit implementation. A local attacker could use these flaws to cause the
kernel to leak kernel memory to user-space, possibly leading to the
disclosure of sensitive information. (CVE-2010-2942, Moderate)
* It was found that wireless drivers might not always clear allocated
buffers when handling a driver-specific IOCTL information request. A local
user could trigger this flaw to cause kernel memory to leak from the heap
to user-space, leading to an information leak. (CVE-2010-2955, Moderate)
* A flaw was found in the eql_g_master_cfg() function in the Linux kernel
equalizer load-balancer for serial network interfaces implementation. A
data structure in eql_g_master_cfg() was not initialized properly before
being copied to user-space. A local, unprivileged user could use this flaw
to cause an information leak. (CVE-2010-3297, Moderate)
Red Hat would like to thank Mathias Krause for reporting CVE-2010-0307, and
Dan Rosenberg for reporting CVE-2010-3297.
This update also fixes the following bugs:
* The mkinitrd utility reported the following warning message when creating
an initial ramdisk:
No module dm-mem-cache found for kernel [version], aborting.
This was caused by an erroneous dependency on dmraid-related modules. This
update removes these dependencies with the result that mkinitrd does not
issue a spurious warning about the dm-mem-cache module not being found.
(BZ#482753)
* The ibm_rtl kernel module now performs more exhaustive checking to ensure
it only loads on correct IBM hardware. (BZ#612275)
* The realtime Linux kernel has been upgraded to upstream version
2.6.33.7-rt29, which provides a number of bug fixes and enhancements for
Red Hat Enterprise MRG 1.3. (BZ#638672)
Users should upgrade to these updated packages, which upgrade the kernel-rt
kernel to version 2.6.33.7-rt29 to correct these issues. The system must be
rebooted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel-rt packages that fix multiple security issues and upgrade\nthe kernel-rt kernel to version 2.6.33.7-rt29 are now available for Red Hat\nEnterprise MRG 1.3.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel-rt packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThis update fixes the following security issues:\n\n* On AMD64 systems, it was discovered that the kernel did not ensure the\nELF interpreter was available before making a call to the SET_PERSONALITY\nmacro. A local attacker could use this flaw to cause a denial of service by\nrunning a 32-bit application that attempts to execute a 64-bit application.\n(CVE-2010-0307, Moderate)\n\n* Information leak flaws were found in the Linux kernel Traffic Control\nUnit implementation. A local attacker could use these flaws to cause the\nkernel to leak kernel memory to user-space, possibly leading to the\ndisclosure of sensitive information. (CVE-2010-2942, Moderate)\n\n* It was found that wireless drivers might not always clear allocated\nbuffers when handling a driver-specific IOCTL information request. A local\nuser could trigger this flaw to cause kernel memory to leak from the heap\nto user-space, leading to an information leak. (CVE-2010-2955, Moderate)\n\n* A flaw was found in the eql_g_master_cfg() function in the Linux kernel\nequalizer load-balancer for serial network interfaces implementation. A\ndata structure in eql_g_master_cfg() was not initialized properly before\nbeing copied to user-space. A local, unprivileged user could use this flaw\nto cause an information leak. (CVE-2010-3297, Moderate)\n\nRed Hat would like to thank Mathias Krause for reporting CVE-2010-0307, and\nDan Rosenberg for reporting CVE-2010-3297.\n\nThis update also fixes the following bugs:\n\n* The mkinitrd utility reported the following warning message when creating\nan initial ramdisk:\n\nNo module dm-mem-cache found for kernel [version], aborting.\n\nThis was caused by an erroneous dependency on dmraid-related modules. This\nupdate removes these dependencies with the result that mkinitrd does not\nissue a spurious warning about the dm-mem-cache module not being found.\n(BZ#482753)\n\n* The ibm_rtl kernel module now performs more exhaustive checking to ensure\nit only loads on correct IBM hardware. (BZ#612275)\n\n* The realtime Linux kernel has been upgraded to upstream version\n2.6.33.7-rt29, which provides a number of bug fixes and enhancements for\nRed Hat Enterprise MRG 1.3. (BZ#638672)\n\nUsers should upgrade to these updated packages, which upgrade the kernel-rt\nkernel to version 2.6.33.7-rt29 to correct these issues. The system must be\nrebooted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2010:0771",
"url": "https://access.redhat.com/errata/RHSA-2010:0771"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "482753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=482753"
},
{
"category": "external",
"summary": "560547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=560547"
},
{
"category": "external",
"summary": "612275",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=612275"
},
{
"category": "external",
"summary": "624903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=624903"
},
{
"category": "external",
"summary": "628434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=628434"
},
{
"category": "external",
"summary": "633145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=633145"
},
{
"category": "external",
"summary": "638672",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=638672"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0771.json"
}
],
"title": "Red Hat Security Advisory: kernel-rt security and bug fix update",
"tracking": {
"current_release_date": "2024-11-05T17:21:01+00:00",
"generator": {
"date": "2024-11-05T17:21:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2010:0771",
"initial_release_date": "2010-10-14T15:26:00+00:00",
"revision_history": [
{
"date": "2010-10-14T15:26:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2010-10-14T11:30:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-05T17:21:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "MRG Realtime for RHEL 5 Server",
"product": {
"name": "MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:1::el5"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-5"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla-devel@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-devel@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-devel@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "perf-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "perf-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-devel@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product": {
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_id": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla-debuginfo@2.6.33.7-rt29.45.el5rt?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla-devel@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-devel@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-devel@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-devel@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product": {
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_id": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla-debuginfo@2.6.33.7-rt29.45.el5rt?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"product": {
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"product_id": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@2.6.33.7-rt29.45.el5rt?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"product": {
"name": "kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"product_id": "kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-doc@2.6.33.7-rt29.45.el5rt?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.src as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src"
},
"product_reference": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch"
},
"product_reference": "kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "perf-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686"
},
"product_reference": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server",
"product_id": "5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
},
"product_reference": "perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"relates_to_product_reference": "5Server-MRG-Realtime-1.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mathias Krause"
]
}
],
"cve": "CVE-2010-0307",
"discovery_date": "2010-01-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "560547"
}
],
"notes": [
{
"category": "description",
"text": "The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: DoS on x86_64",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important or critical impact are addressed.\n\nFor further information about Errata Support Policy, visit: https://access.redhat.com/support/policy/updates/errata/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-0307"
},
{
"category": "external",
"summary": "RHBZ#560547",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=560547"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-0307",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-0307"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0307",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0307"
}
],
"release_date": "2010-01-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-10-14T15:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0771"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: DoS on x86_64"
},
{
"cve": "CVE-2010-2942",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2010-08-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "624903"
}
],
"notes": [
{
"category": "description",
"text": "The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net sched: fix some kernel memory leaks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the version of Linux kernel as shipped with Red Hat\nEnterprise Linux 3 as it did not include upstream commit be84c7f6 (history repository) that introduced the problem. A future kernel update in Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG will address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-2942"
},
{
"category": "external",
"summary": "RHBZ#624903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=624903"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-2942",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-2942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-2942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2942"
}
],
"release_date": "2010-08-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-10-14T15:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0771"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net sched: fix some kernel memory leaks"
},
{
"cve": "CVE-2010-2955",
"discovery_date": "2010-08-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "628434"
}
],
"notes": [
{
"category": "description",
"text": "The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wireless: fix 64K kernel heap content leak via ioctl",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5 as they did not backport the upstream commit 3d23e349 that had introduced the problem. A future update in Red Hat Enterprise MRG may address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-2955"
},
{
"category": "external",
"summary": "RHBZ#628434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=628434"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-2955",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-2955"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-2955",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2955"
}
],
"release_date": "2010-08-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-10-14T15:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0771"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: wireless: fix 64K kernel heap content leak via ioctl"
},
{
"acknowledgments": [
{
"names": [
"Dan Rosenberg"
]
}
],
"cve": "CVE-2010-3296",
"discovery_date": "2010-09-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "633149"
}
],
"notes": [
{
"category": "description",
"text": "The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: drivers/net/cxgb3/cxgb3_main.c reading uninitialized stack memory",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-3296"
},
{
"category": "external",
"summary": "RHBZ#633149",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=633149"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-3296",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-3296"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3296",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3296"
}
],
"release_date": "2010-09-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-10-14T15:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0771"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: drivers/net/cxgb3/cxgb3_main.c reading uninitialized stack memory"
},
{
"acknowledgments": [
{
"names": [
"Dan Rosenberg"
]
}
],
"cve": "CVE-2010-3297",
"discovery_date": "2010-09-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "633145"
}
],
"notes": [
{
"category": "description",
"text": "The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: drivers/net/eql.c: reading uninitialized stack memory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5 as they did not include support for equalizer load-balancer for serial network interfaces. This was addressed in Red Hat Enterprise Linux Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0771.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2010-3297"
},
{
"category": "external",
"summary": "RHBZ#633145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=633145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2010-3297",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-3297"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3297",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3297"
}
],
"release_date": "2010-09-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2010-10-14T15:26:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2010:0771"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.src",
"5Server-MRG-Realtime-1.0:kernel-rt-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debug-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-debuginfo-common-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-doc-0:2.6.33.7-rt29.45.el5rt.noarch",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-trace-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:kernel-rt-vanilla-devel-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-0:2.6.33.7-rt29.45.el5rt.x86_64",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.i686",
"5Server-MRG-Realtime-1.0:perf-debuginfo-0:2.6.33.7-rt29.45.el5rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: drivers/net/eql.c: reading uninitialized stack memory"
}
]
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.