csaf_redhat - rhsa-2011

rhsa-2011_0883

Vulnerability from csaf_redhat

Published

2011-06-21 23:44

Modified

2024-11-22 04:32

Summary

Red Hat Security Advisory: kernel security and bug fix update

Notes

Topic

Updated kernel packages that fix several security issues and three bugs are now available for Red Hat Enterprise Linux 6.0 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update includes backported fixes for security issues. These issues, except for CVE-2011-1182, only affected users of Red Hat Enterprise Linux 6.0 Extended Update Support as they have already been addressed for users of Red Hat Enterprise Linux 6 in the 6.1 update, RHSA-2011:0542. Security fixes: * Buffer overflow flaws were found in the Linux kernel's Management Module Support for Message Passing Technology (MPT) based controllers. A local, unprivileged user could use these flaws to cause a denial of service, an information leak, or escalate their privileges. (CVE-2011-1494, CVE-2011-1495, Important) * A flaw was found in the Linux kernel's networking subsystem. If the number of packets received exceeded the receiver's buffer limit, they were queued in a backlog, consuming memory, instead of being discarded. A remote attacker could abuse this flaw to cause a denial of service (out-of-memory condition). (CVE-2010-4251, CVE-2010-4805, Moderate) * A flaw was found in the Linux kernel's Transparent Huge Pages (THP) implementation. A local, unprivileged user could abuse this flaw to allow the user stack (when it is using huge pages) to grow and cause a denial of service. (CVE-2011-0999, Moderate) * A flaw in the Linux kernel's Event Poll (epoll) implementation could allow a local, unprivileged user to cause a denial of service. (CVE-2011-1082, Moderate) * An inconsistency was found in the interaction between the Linux kernel's method for allocating NFSv4 (Network File System version 4) ACL data and the method by which it was freed. This inconsistency led to a kernel panic which could be triggered by a local, unprivileged user with files owned by said user on an NFSv4 share. (CVE-2011-1090, Moderate) * It was found that some structure padding and reserved fields in certain data structures in KVM (Kernel-based Virtual Machine) were not initialized properly before being copied to user-space. A privileged host user with access to "/dev/kvm" could use this flaw to leak kernel stack memory to user-space. (CVE-2010-3881, Low) * A missing validation check was found in the Linux kernel's mac_partition() implementation, used for supporting file systems created on Mac OS operating systems. A local attacker could use this flaw to cause a denial of service by mounting a disk that contains specially-crafted partitions. (CVE-2011-1010, Low) * A buffer overflow flaw in the DEC Alpha OSF partition implementation in the Linux kernel could allow a local attacker to cause an information leak by mounting a disk that contains specially-crafted partition tables. (CVE-2011-1163, Low) * Missing validations of null-terminated string data structure elements in the do_replace(), compat_do_replace(), do_ipt_get_ctl(), do_ip6t_get_ctl(), and do_arpt_get_ctl() functions could allow a local user who has the CAP_NET_ADMIN capability to cause an information leak. (CVE-2011-1170, CVE-2011-1171, CVE-2011-1172, Low) * A missing validation check was found in the Linux kernel's signals implementation. A local, unprivileged user could use this flaw to send signals via the sigqueueinfo system call, with the si_code set to SI_TKILL and with spoofed process and user IDs, to other processes. Note: This flaw does not allow existing permission checks to be bypassed; signals can only be sent if your privileges allow you to already do so. (CVE-2011-1182, Low) Red Hat would like to thank Dan Rosenberg for reporting CVE-2011-1494 and CVE-2011-1495; Nelson Elhage for reporting CVE-2011-1082; Vasiliy Kulikov for reporting CVE-2010-3881, CVE-2011-1170, CVE-2011-1171, and CVE-2011-1172; Timo Warns for reporting CVE-2011-1010 and CVE-2011-1163; and Julien Tinnes of the Google Security Team for reporting CVE-2011-1182. This update also fixes three bugs. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kernel packages that fix several security issues and three bugs are\nnow available for Red Hat Enterprise Linux 6.0 Extended Update Support.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThis update includes backported fixes for security issues. These issues,\nexcept for CVE-2011-1182, only affected users of Red Hat Enterprise Linux\n6.0 Extended Update Support as they have already been addressed for users\nof Red Hat Enterprise Linux 6 in the 6.1 update, RHSA-2011:0542.\n\nSecurity fixes:\n\n* Buffer overflow flaws were found in the Linux kernel\u0027s Management Module\nSupport for Message Passing Technology (MPT) based controllers. A local,\nunprivileged user could use these flaws to cause a denial of service, an\ninformation leak, or escalate their privileges. (CVE-2011-1494,\nCVE-2011-1495, Important)\n\n* A flaw was found in the Linux kernel\u0027s networking subsystem. If the\nnumber of packets received exceeded the receiver\u0027s buffer limit, they were\nqueued in a backlog, consuming memory, instead of being discarded. A remote\nattacker could abuse this flaw to cause a denial of service (out-of-memory\ncondition). (CVE-2010-4251, CVE-2010-4805, Moderate)\n\n* A flaw was found in the Linux kernel\u0027s Transparent Huge Pages (THP)\nimplementation. A local, unprivileged user could abuse this flaw to allow\nthe user stack (when it is using huge pages) to grow and cause a denial of\nservice. (CVE-2011-0999, Moderate)\n\n* A flaw in the Linux kernel\u0027s Event Poll (epoll) implementation could\nallow a local, unprivileged user to cause a denial of service.\n(CVE-2011-1082, Moderate)\n\n* An inconsistency was found in the interaction between the Linux kernel\u0027s\nmethod for allocating NFSv4 (Network File System version 4) ACL data and\nthe method by which it was freed. This inconsistency led to a kernel panic\nwhich could be triggered by a local, unprivileged user with files owned by\nsaid user on an NFSv4 share. (CVE-2011-1090, Moderate)\n\n* It was found that some structure padding and reserved fields in certain\ndata structures in KVM (Kernel-based Virtual Machine) were not initialized\nproperly before being copied to user-space. A privileged host user with\naccess to \"/dev/kvm\" could use this flaw to leak kernel stack memory to\nuser-space. (CVE-2010-3881, Low)\n\n* A missing validation check was found in the Linux kernel\u0027s\nmac_partition() implementation, used for supporting file systems created on\nMac OS operating systems. A local attacker could use this flaw to cause a\ndenial of service by mounting a disk that contains specially-crafted\npartitions. (CVE-2011-1010, Low)\n\n* A buffer overflow flaw in the DEC Alpha OSF partition implementation in\nthe Linux kernel could allow a local attacker to cause an information leak\nby mounting a disk that contains specially-crafted partition tables.\n(CVE-2011-1163, Low)\n\n* Missing validations of null-terminated string data structure elements in\nthe do_replace(), compat_do_replace(), do_ipt_get_ctl(), do_ip6t_get_ctl(),\nand do_arpt_get_ctl() functions could allow a local user who has the\nCAP_NET_ADMIN capability to cause an information leak. (CVE-2011-1170,\nCVE-2011-1171, CVE-2011-1172, Low)\n\n* A missing validation check was found in the Linux kernel\u0027s signals\nimplementation. A local, unprivileged user could use this flaw to send\nsignals via the sigqueueinfo system call, with the si_code set to SI_TKILL\nand with spoofed process and user IDs, to other processes. Note: This flaw\ndoes not allow existing permission checks to be bypassed; signals can only\nbe sent if your privileges allow you to already do so. (CVE-2011-1182, Low)\n\nRed Hat would like to thank Dan Rosenberg for reporting CVE-2011-1494 and\nCVE-2011-1495; Nelson Elhage for reporting CVE-2011-1082; Vasiliy\nKulikov for reporting CVE-2010-3881, CVE-2011-1170, CVE-2011-1171, and\nCVE-2011-1172; Timo Warns for reporting CVE-2011-1010 and CVE-2011-1163;\nand Julien Tinnes of the Google Security Team for reporting CVE-2011-1182.\n\nThis update also fixes three bugs. Documentation for these changes will\nbe available shortly from the Technical Notes document linked to in the\nReferences section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2011:0883",
        "url": "https://access.redhat.com/errata/RHSA-2011:0883"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/ape.html#RHSA-2011-0883",
        "url": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/ape.html#RHSA-2011-0883"
      },
      {
        "category": "external",
        "summary": "https://rhn.redhat.com/errata/RHSA-2011-0542.html",
        "url": "https://rhn.redhat.com/errata/RHSA-2011-0542.html"
      },
      {
        "category": "external",
        "summary": "649920",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=649920"
      },
      {
        "category": "external",
        "summary": "657303",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
      },
      {
        "category": "external",
        "summary": "678209",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=678209"
      },
      {
        "category": "external",
        "summary": "679282",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=679282"
      },
      {
        "category": "external",
        "summary": "681575",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=681575"
      },
      {
        "category": "external",
        "summary": "682641",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=682641"
      },
      {
        "category": "external",
        "summary": "688021",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688021"
      },
      {
        "category": "external",
        "summary": "689321",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689321"
      },
      {
        "category": "external",
        "summary": "689327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689327"
      },
      {
        "category": "external",
        "summary": "689345",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689345"
      },
      {
        "category": "external",
        "summary": "690028",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=690028"
      },
      {
        "category": "external",
        "summary": "694021",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0883.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-22T04:32:30+00:00",
      "generator": {
        "date": "2024-11-22T04:32:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2011:0883",
      "initial_release_date": "2011-06-21T23:44:00+00:00",
      "revision_history": [
        {
          "date": "2011-06-21T23:44:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2011-06-21T19:52:55+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T04:32:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server EUS (v. 6.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS (v. 6.0)",
                  "product_id": "6Server-6.0.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-devel-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-devel-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-devel@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-headers-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-headers-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-headers@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo-common-i686@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:2.6.32-71.31.1.el6.i686",
                "product": {
                  "name": "kernel-debug-0:2.6.32-71.31.1.el6.i686",
                  "product_id": "kernel-debug-0:2.6.32-71.31.1.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@2.6.32-71.31.1.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-devel@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-headers@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-bootwrapper@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
                "product": {
                  "name": "kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
                  "product_id": "kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@2.6.32-71.31.1.el6?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-devel-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-devel-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-devel@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-headers-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-headers-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-headers@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-kdump-devel@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-kdump@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-kdump-debuginfo@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:2.6.32-71.31.1.el6.s390x",
                "product": {
                  "name": "kernel-debug-0:2.6.32-71.31.1.el6.s390x",
                  "product_id": "kernel-debug-0:2.6.32-71.31.1.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@2.6.32-71.31.1.el6?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-devel@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-headers@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
                "product": {
                  "name": "kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
                  "product_id": "kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@2.6.32-71.31.1.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:2.6.32-71.31.1.el6.src",
                "product": {
                  "name": "kernel-0:2.6.32-71.31.1.el6.src",
                  "product_id": "kernel-0:2.6.32-71.31.1.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.6.32-71.31.1.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
                "product": {
                  "name": "kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
                  "product_id": "kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-firmware@2.6.32-71.31.1.el6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:2.6.32-71.31.1.el6.noarch",
                "product": {
                  "name": "perf-0:2.6.32-71.31.1.el6.noarch",
                  "product_id": "perf-0:2.6.32-71.31.1.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perf@2.6.32-71.31.1.el6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:2.6.32-71.31.1.el6.noarch",
                "product": {
                  "name": "kernel-doc-0:2.6.32-71.31.1.el6.noarch",
                  "product_id": "kernel-doc-0:2.6.32-71.31.1.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-doc@2.6.32-71.31.1.el6?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.6.32-71.31.1.el6.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src"
        },
        "product_reference": "kernel-0:2.6.32-71.31.1.el6.src",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-debug-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-debug-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-devel-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-devel-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.6.32-71.31.1.el6.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch"
        },
        "product_reference": "kernel-doc-0:2.6.32-71.31.1.el6.noarch",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-firmware-0:2.6.32-71.31.1.el6.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch"
        },
        "product_reference": "kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.6.32-71.31.1.el6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686"
        },
        "product_reference": "kernel-headers-0:2.6.32-71.31.1.el6.i686",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.6.32-71.31.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64"
        },
        "product_reference": "kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-headers-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.6.32-71.31.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64"
        },
        "product_reference": "kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kdump-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x"
        },
        "product_reference": "kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
        "relates_to_product_reference": "6Server-6.0.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:2.6.32-71.31.1.el6.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 6.0)",
          "product_id": "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        },
        "product_reference": "perf-0:2.6.32-71.31.1.el6.noarch",
        "relates_to_product_reference": "6Server-6.0.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Vasiliy Kulikov"
          ],
          "organization": "Openwall"
        }
      ],
      "cve": "CVE-2010-3881",
      "discovery_date": "2010-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "649920"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the version of Linux kernel as shipped with Red Hat\nEnterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include\nsupport for Kernel-based Virtual Machine (KVM). A future kernel update in Red\nHat Enterprise Linux 5 may address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-3881"
        },
        {
          "category": "external",
          "summary": "RHBZ#649920",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=649920"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3881",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-3881"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3881",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3881"
        }
      ],
      "release_date": "2010-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.9,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory"
    },
    {
      "cve": "CVE-2010-4251",
      "discovery_date": "2010-11-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "657303"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: unlimited socket backlog DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG as they have already backported the fixes for this issue. Future kernel updates in Red Hat Enterprise Linux 6 may address this flaw. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-4251"
        },
        {
          "category": "external",
          "summary": "RHBZ#657303",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4251",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-4251"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4251",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4251"
        }
      ],
      "release_date": "2010-11-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: unlimited socket backlog DoS"
    },
    {
      "cve": "CVE-2010-4805",
      "discovery_date": "2010-11-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "657303"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: unlimited socket backlog DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG as they have already backported the fixes for this issue. Future kernel updates in Red Hat Enterprise Linux 6 may address this flaw. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-4805"
        },
        {
          "category": "external",
          "summary": "RHBZ#657303",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4805",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-4805"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4805",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4805"
        }
      ],
      "release_date": "2010-11-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: unlimited socket backlog DoS"
    },
    {
      "cve": "CVE-2011-0999",
      "discovery_date": "2011-02-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "678209"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: thp: prevent hugepages during args/env copying into the user stack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue only affects Red Hat Enterprise Linux 6. The version of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG as they did not include upstream commit 71e3aac0 that introduced the problem. We have addressed this in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-0542.html.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-0999"
        },
        {
          "category": "external",
          "summary": "RHBZ#678209",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=678209"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-0999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-0999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-0999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0999"
        }
      ],
      "release_date": "2011-02-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: thp: prevent hugepages during args/env copying into the user stack"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Timo Warns"
          ]
        }
      ],
      "cve": "CVE-2011-1010",
      "discovery_date": "2011-02-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "679282"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: fs/partitions: Validate map_count in Mac partition tables",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0429.html, https://rhn.redhat.com/errata/RHSA-2011-0542.html and https://rhn.redhat.com/errata/RHSA-2011-0500.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1010"
        },
        {
          "category": "external",
          "summary": "RHBZ#679282",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=679282"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1010",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1010"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1010",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1010"
        }
      ],
      "release_date": "2011-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: fs/partitions: Validate map_count in Mac partition tables"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Nelson Elhage"
          ]
        }
      ],
      "cve": "CVE-2011-1082",
      "discovery_date": "2011-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "681575"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: potential kernel deadlock when creating circular epoll file structures",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5. This was addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0542.html and https://rhn.redhat.com/errata/RHSA-2011-0500.html.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1082"
        },
        {
          "category": "external",
          "summary": "RHBZ#681575",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=681575"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1082",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1082"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1082",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1082"
        }
      ],
      "release_date": "2011-02-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: potential kernel deadlock when creating circular epoll file structures"
    },
    {
      "cve": "CVE-2011-1090",
      "discovery_date": "2011-03-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "682641"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not backport the upstream commit 4b580ee3 that introduced this issue. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0429.html, https://rhn.redhat.com/errata/RHSA-2011-0542.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1090"
        },
        {
          "category": "external",
          "summary": "RHBZ#682641",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=682641"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1090",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1090"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1090",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1090"
        }
      ],
      "release_date": "2011-03-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Timo Warns"
          ]
        }
      ],
      "cve": "CVE-2011-1163",
      "discovery_date": "2011-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "688021"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: fs/partitions: Corrupted OSF partition table infoleak",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0833.html, https://rhn.redhat.com/errata/RHSA-2011-0542.html, and https://rhn.redhat.com/errata/RHSA-2011-0500.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for\nthis issue is not currently planned to be included in the future updates.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1163"
        },
        {
          "category": "external",
          "summary": "RHBZ#688021",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688021"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1163"
        }
      ],
      "release_date": "2011-03-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: fs/partitions: Corrupted OSF partition table infoleak"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Vasiliy Kulikov"
          ],
          "organization": "Openwall"
        }
      ],
      "cve": "CVE-2011-1170",
      "discovery_date": "2011-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "689321"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected \u0027\\0\u0027 character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipv4: netfilter: arp_tables: fix infoleak to userspace",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance\nlife-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore\nthe fix for this issue is not currently planned to be included in the future\nupdates. Future kernel updates in Red Hat Enterprise Linux 5, 6 and Red Hat\nEnterprise MRG may address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1170"
        },
        {
          "category": "external",
          "summary": "RHBZ#689321",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689321"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1170",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1170"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1170",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1170"
        }
      ],
      "release_date": "2011-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: ipv4: netfilter: arp_tables: fix infoleak to userspace"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Vasiliy Kulikov"
          ],
          "organization": "Openwall"
        }
      ],
      "cve": "CVE-2011-1171",
      "discovery_date": "2011-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "689327"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected \u0027\\0\u0027 character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipv4: netfilter: ip_tables: fix infoleak to userspace",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance\nlife-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. Future kernel updates in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG may address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1171"
        },
        {
          "category": "external",
          "summary": "RHBZ#689327",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689327"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1171",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1171"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1171",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1171"
        }
      ],
      "release_date": "2011-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: ipv4: netfilter: ip_tables: fix infoleak to userspace"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Vasiliy Kulikov"
          ],
          "organization": "Openwall"
        }
      ],
      "cve": "CVE-2011-1172",
      "discovery_date": "2011-03-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "689345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected \u0027\\0\u0027 character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle,\nhttps://access.redhat.com/support/policy/updates/errata/, therefore the fix for\nthis issue is not currently planned to be included in the future updates. Future kernel updates in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise\nMRG may address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1172"
        },
        {
          "category": "external",
          "summary": "RHBZ#689345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1172"
        }
      ],
      "release_date": "2011-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Julien Tinnes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2011-1182",
      "discovery_date": "2011-03-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "690028"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel signal spoofing issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This was addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html. A future kernel update in Red Hat Enterprise MRG may address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1182"
        },
        {
          "category": "external",
          "summary": "RHBZ#690028",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=690028"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1182"
        }
      ],
      "release_date": "2011-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel signal spoofing issue"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dan Rosenberg"
          ]
        }
      ],
      "cve": "CVE-2011-1494",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2011-04-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "694021"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: drivers/scsi/mpt2sas: prevent heap overflows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the version of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 as it did not provide support for MPT (Message Passing\nTechnology) based controllers. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0833.html, and https://rhn.redhat.com/errata/RHSA-2011-0542.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1494"
        },
        {
          "category": "external",
          "summary": "RHBZ#694021",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1494"
        }
      ],
      "release_date": "2011-04-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: drivers/scsi/mpt2sas: prevent heap overflows"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dan Rosenberg"
          ]
        }
      ],
      "cve": "CVE-2011-1495",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2011-04-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "694021"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: drivers/scsi/mpt2sas: prevent heap overflows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the version of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 as it did not provide support for MPT (Message Passing\nTechnology) based controllers. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0833.html, and https://rhn.redhat.com/errata/RHSA-2011-0542.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
          "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
          "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
          "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1495"
        },
        {
          "category": "external",
          "summary": "RHBZ#694021",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1495"
        }
      ],
      "release_date": "2011-04-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-06-21T23:44:00+00:00",
          "details": "Users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues, and fix the bugs noted in\nthe Technical Notes. The system must be rebooted for this update to\ntake effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
          "product_ids": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ],
          "restart_required": {
            "category": "machine"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:0883"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.src",
            "6Server-6.0.z:kernel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-bootwrapper-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debug-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-debuginfo-common-i686-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-debuginfo-common-ppc64-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-debuginfo-common-s390x-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-debuginfo-common-x86_64-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-devel-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-doc-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-firmware-0:2.6.32-71.31.1.el6.noarch",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.i686",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.ppc64",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-headers-0:2.6.32-71.31.1.el6.x86_64",
            "6Server-6.0.z:kernel-kdump-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-debuginfo-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:kernel-kdump-devel-0:2.6.32-71.31.1.el6.s390x",
            "6Server-6.0.z:perf-0:2.6.32-71.31.1.el6.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: drivers/scsi/mpt2sas: prevent heap overflows"
    }
  ]
}

cve-2010-3881

Vulnerability from cvelistv5

Published

2010-12-23 17:00

Modified

2024-08-07 03:26

Severity ?

Summary

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.spinics.net/lists/kvm/msg44130.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/44666	vdb-entry, x_refsource_BID
	http://openwall.com/lists/oss-security/2010/11/05/4	mailing-list, x_refsource_MLIST
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97e69aa62f8b5d338d6cff49be09e37cc1262838	x_refsource_CONFIRM
	http://secunia.com/advisories/42932	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2011/0124	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1024912	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2011/0298	vdb-entry, x_refsource_VUPEN
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=649920	x_refsource_CONFIRM
	http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3bc5aa531a905	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2010/11/04/10	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2010-0998.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/3287	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:26:12.211Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2011:004",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html"
          },
          {
            "name": "[kvm] 20101030 [patch v2] x86: kvm: x86: fix information leak to userland",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.spinics.net/lists/kvm/msg44130.html"
          },
          {
            "name": "44666",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/44666"
          },
          {
            "name": "[oss-security] 20101105 Re: CVE request: kernel: kvm kernel stack leakage",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2010/11/05/4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97e69aa62f8b5d338d6cff49be09e37cc1262838"
          },
          {
            "name": "42932",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42932"
          },
          {
            "name": "ADV-2011-0124",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0124"
          },
          {
            "name": "1024912",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1024912"
          },
          {
            "name": "SUSE-SA:2011:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html"
          },
          {
            "name": "ADV-2011-0298",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0298"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=649920"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3bc5aa531a905"
          },
          {
            "name": "[oss-security] 20101104 CVE request: kernel: kvm kernel stack leakage",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2010/11/04/10"
          },
          {
            "name": "RHSA-2010:0998",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2010-0998.html"
          },
          {
            "name": "ADV-2010-3287",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/3287"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-10-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-01-21T10:00:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SUSE-SA:2011:004",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html"
        },
        {
          "name": "[kvm] 20101030 [patch v2] x86: kvm: x86: fix information leak to userland",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.spinics.net/lists/kvm/msg44130.html"
        },
        {
          "name": "44666",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/44666"
        },
        {
          "name": "[oss-security] 20101105 Re: CVE request: kernel: kvm kernel stack leakage",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2010/11/05/4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97e69aa62f8b5d338d6cff49be09e37cc1262838"
        },
        {
          "name": "42932",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42932"
        },
        {
          "name": "ADV-2011-0124",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0124"
        },
        {
          "name": "1024912",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1024912"
        },
        {
          "name": "SUSE-SA:2011:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html"
        },
        {
          "name": "ADV-2011-0298",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0298"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=649920"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3bc5aa531a905"
        },
        {
          "name": "[oss-security] 20101104 CVE request: kernel: kvm kernel stack leakage",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2010/11/04/10"
        },
        {
          "name": "RHSA-2010:0998",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2010-0998.html"
        },
        {
          "name": "ADV-2010-3287",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/3287"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-3881",
    "datePublished": "2010-12-23T17:00:00",
    "dateReserved": "2010-10-08T00:00:00",
    "dateUpdated": "2024-08-07T03:26:12.211Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1010

Vulnerability from cvelistv5

Published

2011-03-01 22:00

Modified

2024-08-06 22:14

Severity ?

Summary

Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table.

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/520102/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/46397	third-party-advisory, x_refsource_SECUNIA
	http://securityreason.com/securityalert/8115	third-party-advisory, x_refsource_SREASON
	http://openwall.com/lists/oss-security/2011/02/22/3	mailing-list, x_refsource_MLIST
	https://exchange.xforce.ibmcloud.com/vulnerabilities/65643	vdb-entry, x_refsource_XF
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37.2	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=679282	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/46492	vdb-entry, x_refsource_BID
	http://openwall.com/lists/oss-security/2011/02/22/11	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/archive/1/516615/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/02/22/15	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id?1025126	vdb-entry, x_refsource_SECTRACK
	http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt	x_refsource_MISC
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa7ea87a057958a8b7926c1a60a3ca6d696328ed	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:26.828Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
          },
          {
            "name": "46397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/46397"
          },
          {
            "name": "8115",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8115"
          },
          {
            "name": "[oss-security] 20110222 CVE request: kernel: fs/partitions: validate map_count in mac partition tables",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/22/3"
          },
          {
            "name": "kernel-map-dos(65643)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65643"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37.2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=679282"
          },
          {
            "name": "46492",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46492"
          },
          {
            "name": "[oss-security] 20110222 Re: CVE request: kernel: fs/partitions: validate map_count in mac partition tables",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/22/11"
          },
          {
            "name": "20110223 [PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/516615/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
          },
          {
            "name": "[oss-security] 20110222 Re: CVE request: kernel: fs/partitions: validate map_count in mac partition tables",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/22/15"
          },
          {
            "name": "1025126",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1025126"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa7ea87a057958a8b7926c1a60a3ca6d696328ed"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-02-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
        },
        {
          "name": "46397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/46397"
        },
        {
          "name": "8115",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8115"
        },
        {
          "name": "[oss-security] 20110222 CVE request: kernel: fs/partitions: validate map_count in mac partition tables",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/22/3"
        },
        {
          "name": "kernel-map-dos(65643)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65643"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37.2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=679282"
        },
        {
          "name": "46492",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46492"
        },
        {
          "name": "[oss-security] 20110222 Re: CVE request: kernel: fs/partitions: validate map_count in mac partition tables",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/22/11"
        },
        {
          "name": "20110223 [PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/516615/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
        },
        {
          "name": "[oss-security] 20110222 Re: CVE request: kernel: fs/partitions: validate map_count in mac partition tables",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/22/15"
        },
        {
          "name": "1025126",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1025126"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa7ea87a057958a8b7926c1a60a3ca6d696328ed"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1010",
    "datePublished": "2011-03-01T22:00:00",
    "dateReserved": "2011-02-14T00:00:00",
    "dateUpdated": "2024-08-06T22:14:26.828Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-4805

Vulnerability from cvelistv5

Published

2011-05-26 16:00

Modified

2024-09-17 00:21

Severity ?

Summary

The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.

References

▼	URL	Tags
	http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread	mailing-list, x_refsource_MLIST
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c377411f2494a931ff7facdbb3a6839b1266bcf6	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/46637	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=657303	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:02:29.944Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[netdev] 20100302 [PATCH 1/8] net: add limit for socket backlog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c377411f2494a931ff7facdbb3a6839b1266bcf6"
          },
          {
            "name": "46637",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46637"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-05-26T16:00:00Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[netdev] 20100302 [PATCH 1/8] net: add limit for socket backlog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c377411f2494a931ff7facdbb3a6839b1266bcf6"
        },
        {
          "name": "46637",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46637"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-4805",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[netdev] 20100302 [PATCH 1/8] net: add limit for socket backlog",
              "refsource": "MLIST",
              "url": "http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c377411f2494a931ff7facdbb3a6839b1266bcf6",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c377411f2494a931ff7facdbb3a6839b1266bcf6"
            },
            {
              "name": "46637",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46637"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=657303",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-4805",
    "datePublished": "2011-05-26T16:00:00Z",
    "dateReserved": "2011-05-26T00:00:00Z",
    "dateUpdated": "2024-09-17T00:21:21.749Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1172

Vulnerability from cvelistv5

Published

2011-06-22 22:00

Modified

2024-08-06 22:21

Severity ?

Summary

net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2011/03/18/15	mailing-list, x_refsource_MLIST
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a8ab060779779de8aea92ce3337ca348f973f54	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=689345	x_refsource_CONFIRM
	http://marc.info/?l=linux-kernel&m=129978086410061&w=2	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2011-0833.html	vendor-advisory, x_refsource_REDHAT
	http://downloads.avaya.com/css/P8/documents/100145416	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2011/03/21/4	mailing-list, x_refsource_MLIST
	http://securityreason.com/securityalert/8278	third-party-advisory, x_refsource_SREASON
	http://www.openwall.com/lists/oss-security/2011/03/21/1	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:21:32.271Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110318 CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/18/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a8ab060779779de8aea92ce3337ca348f973f54"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689345"
          },
          {
            "name": "[linux-kernel] 20110310 [PATCH] ipv6: netfilter: ip6_tables: fix infoleak to userspace",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=129978086410061\u0026w=2"
          },
          {
            "name": "RHSA-2011:0833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.avaya.com/css/P8/documents/100145416"
          },
          {
            "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/21/4"
          },
          {
            "name": "8278",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8278"
          },
          {
            "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/21/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected \u0027\\0\u0027 character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-04-30T14:57:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110318 CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/18/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a8ab060779779de8aea92ce3337ca348f973f54"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689345"
        },
        {
          "name": "[linux-kernel] 20110310 [PATCH] ipv6: netfilter: ip6_tables: fix infoleak to userspace",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=129978086410061\u0026w=2"
        },
        {
          "name": "RHSA-2011:0833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.avaya.com/css/P8/documents/100145416"
        },
        {
          "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/21/4"
        },
        {
          "name": "8278",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8278"
        },
        {
          "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/21/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1172",
    "datePublished": "2011-06-22T22:00:00",
    "dateReserved": "2011-03-03T00:00:00",
    "dateUpdated": "2024-08-06T22:21:32.271Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1170

Vulnerability from cvelistv5

Published

2011-06-22 22:00

Modified

2024-08-06 22:21

Severity ?

Summary

net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

References

▼	URL	Tags
	http://securityreason.com/securityalert/8282	third-party-advisory, x_refsource_SREASON
	https://bugzilla.redhat.com/show_bug.cgi?id=689321	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2011/03/18/15	mailing-list, x_refsource_MLIST
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=42eab94fff18cb1091d3501cd284d6bd6cc9c143	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2011-0833.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=netfilter-devel&m=129978081009955&w=2	mailing-list, x_refsource_MLIST
	http://downloads.avaya.com/css/P8/documents/100145416	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2011/03/21/4	mailing-list, x_refsource_MLIST
	http://securityreason.com/securityalert/8278	third-party-advisory, x_refsource_SREASON
	http://www.openwall.com/lists/oss-security/2011/03/21/1	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:21:33.451Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "8282",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8282"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689321"
          },
          {
            "name": "[oss-security] 20110318 CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/18/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=42eab94fff18cb1091d3501cd284d6bd6cc9c143"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
          },
          {
            "name": "RHSA-2011:0833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
          },
          {
            "name": "[netfilter-devel] 20110310 [PATCH] ipv4: netfilter: arp_tables: fix infoleak to userspace",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=netfilter-devel\u0026m=129978081009955\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.avaya.com/css/P8/documents/100145416"
          },
          {
            "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/21/4"
          },
          {
            "name": "8278",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8278"
          },
          {
            "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/21/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected \u0027\\0\u0027 character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-04-30T14:57:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "8282",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8282"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689321"
        },
        {
          "name": "[oss-security] 20110318 CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/18/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=42eab94fff18cb1091d3501cd284d6bd6cc9c143"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
        },
        {
          "name": "RHSA-2011:0833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
        },
        {
          "name": "[netfilter-devel] 20110310 [PATCH] ipv4: netfilter: arp_tables: fix infoleak to userspace",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=netfilter-devel\u0026m=129978081009955\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.avaya.com/css/P8/documents/100145416"
        },
        {
          "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/21/4"
        },
        {
          "name": "8278",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8278"
        },
        {
          "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/21/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1170",
    "datePublished": "2011-06-22T22:00:00",
    "dateReserved": "2011-03-03T00:00:00",
    "dateUpdated": "2024-08-06T22:21:33.451Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1171

Vulnerability from cvelistv5

Published

2011-06-22 22:00

Modified

2024-08-06 22:21

Severity ?

Summary

net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

References

▼	URL	Tags
	http://securityreason.com/securityalert/8283	third-party-advisory, x_refsource_SREASON
	http://www.openwall.com/lists/oss-security/2011/03/18/15	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=689327	x_refsource_CONFIRM
	http://marc.info/?l=linux-kernel&m=129978077609894&w=2	mailing-list, x_refsource_MLIST
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2011-0833.html	vendor-advisory, x_refsource_REDHAT
	http://downloads.avaya.com/css/P8/documents/100145416	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78b79876761b86653df89c48a7010b5cbd41a84a	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2011/03/21/4	mailing-list, x_refsource_MLIST
	http://securityreason.com/securityalert/8278	third-party-advisory, x_refsource_SREASON
	http://www.openwall.com/lists/oss-security/2011/03/21/1	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:21:32.228Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "8283",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8283"
          },
          {
            "name": "[oss-security] 20110318 CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/18/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689327"
          },
          {
            "name": "[linux-kernel] 20110310 [PATCH] ipv4: netfilter: ip_tables: fix infoleak to userspace",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=129978077609894\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
          },
          {
            "name": "RHSA-2011:0833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.avaya.com/css/P8/documents/100145416"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78b79876761b86653df89c48a7010b5cbd41a84a"
          },
          {
            "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/21/4"
          },
          {
            "name": "8278",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8278"
          },
          {
            "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/21/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected \u0027\\0\u0027 character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-04-30T14:57:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "8283",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8283"
        },
        {
          "name": "[oss-security] 20110318 CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/18/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=689327"
        },
        {
          "name": "[linux-kernel] 20110310 [PATCH] ipv4: netfilter: ip_tables: fix infoleak to userspace",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=129978077609894\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
        },
        {
          "name": "RHSA-2011:0833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.avaya.com/css/P8/documents/100145416"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78b79876761b86653df89c48a7010b5cbd41a84a"
        },
        {
          "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/21/4"
        },
        {
          "name": "8278",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8278"
        },
        {
          "name": "[oss-security] 20110321 Re: CVE request: kernel: netfilter \u0026 econet infoleaks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/21/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1171",
    "datePublished": "2011-06-22T22:00:00",
    "dateReserved": "2011-03-03T00:00:00",
    "dateUpdated": "2024-08-06T22:21:32.228Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-0999

Vulnerability from cvelistv5

Published

2011-02-23 18:00

Modified

2024-08-06 22:14

Severity ?

Summary

mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application.

References

▼	URL	Tags
	http://openwall.com/lists/oss-security/2011/02/17/3	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/46442	vdb-entry, x_refsource_BID
	http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a7d6e4ecdb7648478ddec76d30d87d03d6e22b31	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=678209	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/02/17/6	mailing-list, x_refsource_MLIST
	https://exchange.xforce.ibmcloud.com/vulnerabilities/65535	vdb-entry, x_refsource_XF

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:26.799Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110217 CVE request - kernel: thp: prevent hugepages during args/env copying into the user stack",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/17/3"
          },
          {
            "name": "46442",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46442"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a7d6e4ecdb7648478ddec76d30d87d03d6e22b31"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=678209"
          },
          {
            "name": "[oss-security] 20110217 Re: CVE request - kernel: thp: prevent hugepages during args/env copying into the user stack",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/17/6"
          },
          {
            "name": "kernel-hugepages-dos(65535)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65535"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110217 CVE request - kernel: thp: prevent hugepages during args/env copying into the user stack",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/17/3"
        },
        {
          "name": "46442",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46442"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.38-rc5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a7d6e4ecdb7648478ddec76d30d87d03d6e22b31"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=678209"
        },
        {
          "name": "[oss-security] 20110217 Re: CVE request - kernel: thp: prevent hugepages during args/env copying into the user stack",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/17/6"
        },
        {
          "name": "kernel-hugepages-dos(65535)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65535"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-0999",
    "datePublished": "2011-02-23T18:00:00",
    "dateReserved": "2011-02-14T00:00:00",
    "dateUpdated": "2024-08-06T22:14:26.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1182

Vulnerability from cvelistv5

Published

2013-03-01 11:00

Modified

2024-08-06 22:21

Severity ?

Summary

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2011/03/23/2	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2011-0927.html	vendor-advisory, x_refsource_REDHAT
	http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=690028	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:21:32.260Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110323 Re: Linux kernel signal spoofing vulnerability (CVE request)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/03/23/2"
          },
          {
            "name": "RHSA-2011:0927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0927.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=690028"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-01-07T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110323 Re: Linux kernel signal spoofing vulnerability (CVE request)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/03/23/2"
        },
        {
          "name": "RHSA-2011:0927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0927.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=690028"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1182",
    "datePublished": "2013-03-01T11:00:00",
    "dateReserved": "2011-03-03T00:00:00",
    "dateUpdated": "2024-08-06T22:21:32.260Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1163

Vulnerability from cvelistv5

Published

2011-04-10 01:00

Modified

2024-08-06 22:14

Severity ?

Summary

The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.

References

▼	URL	Tags
	http://www.spinics.net/lists/mm-commits/msg82737.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/46878	vdb-entry, x_refsource_BID
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=688021	x_refsource_CONFIRM
	http://securityreason.com/securityalert/8189	third-party-advisory, x_refsource_SREASON
	http://securitytracker.com/id?1025225	vdb-entry, x_refsource_SECTRACK
	http://openwall.com/lists/oss-security/2011/03/15/14	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2011-0833.html	vendor-advisory, x_refsource_REDHAT
	http://openwall.com/lists/oss-security/2011/03/15/9	mailing-list, x_refsource_MLIST
	http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt	x_refsource_MISC
	http://downloads.avaya.com/css/P8/documents/100145416	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/517050	mailing-list, x_refsource_BUGTRAQ
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.836Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[mm-commits] 20110314 + fs-partitions-osfc-corrupted-osf-partition-table-can-cause-information-disclosure.patch added to -mm tree",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.spinics.net/lists/mm-commits/msg82737.html"
          },
          {
            "name": "46878",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46878"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688021"
          },
          {
            "name": "8189",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8189"
          },
          {
            "name": "1025225",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025225"
          },
          {
            "name": "[oss-security] 20110315 Re: CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/15/14"
          },
          {
            "name": "RHSA-2011:0833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
          },
          {
            "name": "[oss-security] 20110315 CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/15/9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.avaya.com/css/P8/documents/100145416"
          },
          {
            "name": "20110317 [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/517050"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-05-08T17:57:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[mm-commits] 20110314 + fs-partitions-osfc-corrupted-osf-partition-table-can-cause-information-disclosure.patch added to -mm tree",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.spinics.net/lists/mm-commits/msg82737.html"
        },
        {
          "name": "46878",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46878"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688021"
        },
        {
          "name": "8189",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8189"
        },
        {
          "name": "1025225",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025225"
        },
        {
          "name": "[oss-security] 20110315 Re: CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/15/14"
        },
        {
          "name": "RHSA-2011:0833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
        },
        {
          "name": "[oss-security] 20110315 CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/15/9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.avaya.com/css/P8/documents/100145416"
        },
        {
          "name": "20110317 [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/517050"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1163",
    "datePublished": "2011-04-10T01:00:00",
    "dateReserved": "2011-03-03T00:00:00",
    "dateUpdated": "2024-08-06T22:14:27.836Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1495

Vulnerability from cvelistv5

Published

2011-05-03 19:00

Modified

2024-08-06 22:28

Severity ?

Summary

drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.

References

▼	URL	Tags
	http://lkml.org/lkml/2011/4/5/327	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/04/05/32	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/archive/1/520102/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/46397	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=694021	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/04/06/2	mailing-list, x_refsource_MLIST
	https://patchwork.kernel.org/patch/688021/	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2011-0833.html	vendor-advisory, x_refsource_REDHAT
	http://downloads.avaya.com/css/P8/documents/100145416	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/47185	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.810Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[linux-kernel] 20110405 [PATCH] drivers/scsi/mpt2sas: prevent heap overflows and unchecked reads",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2011/4/5/327"
          },
          {
            "name": "[oss-security] 20110405 CVE request: kernel: two issues in mpt2sas",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/04/05/32"
          },
          {
            "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
          },
          {
            "name": "46397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/46397"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
          },
          {
            "name": "[oss-security] 20110406 Re: CVE request: kernel: two issues in mpt2sas",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/04/06/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/688021/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
          },
          {
            "name": "RHSA-2011:0833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.avaya.com/css/P8/documents/100145416"
          },
          {
            "name": "47185",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/47185"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[linux-kernel] 20110405 [PATCH] drivers/scsi/mpt2sas: prevent heap overflows and unchecked reads",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2011/4/5/327"
        },
        {
          "name": "[oss-security] 20110405 CVE request: kernel: two issues in mpt2sas",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/04/05/32"
        },
        {
          "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
        },
        {
          "name": "46397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/46397"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
        },
        {
          "name": "[oss-security] 20110406 Re: CVE request: kernel: two issues in mpt2sas",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/04/06/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/patch/688021/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
        },
        {
          "name": "RHSA-2011:0833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.avaya.com/css/P8/documents/100145416"
        },
        {
          "name": "47185",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/47185"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1495",
    "datePublished": "2011-05-03T19:00:00",
    "dateReserved": "2011-03-21T00:00:00",
    "dateUpdated": "2024-08-06T22:28:41.810Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1082

Vulnerability from cvelistv5

Published

2011-04-03 01:00

Modified

2024-08-06 22:14

Severity ?

Summary

fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

References

▼	URL	Tags
	http://openwall.com/lists/oss-security/2011/03/02/2	mailing-list, x_refsource_MLIST
	https://lkml.org/lkml/2011/2/5/220	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=681575	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/03/02/1	mailing-list, x_refsource_MLIST
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.809Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110302 Re: CVE request: kernel: Multiple DoS issues in epoll",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/02/2"
          },
          {
            "name": "[linux-kernel] 20110205 [PATCH] epoll: Prevent deadlock through unsafe -\u003ef_op-\u003epoll() calls.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lkml.org/lkml/2011/2/5/220"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=681575"
          },
          {
            "name": "[oss-security] 20110301 CVE request: kernel: Multiple DoS issues in epoll",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/02/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-04-03T01:00:00Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110302 Re: CVE request: kernel: Multiple DoS issues in epoll",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/02/2"
        },
        {
          "name": "[linux-kernel] 20110205 [PATCH] epoll: Prevent deadlock through unsafe -\u003ef_op-\u003epoll() calls.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lkml.org/lkml/2011/2/5/220"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=681575"
        },
        {
          "name": "[oss-security] 20110301 CVE request: kernel: Multiple DoS issues in epoll",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/02/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1082",
    "datePublished": "2011-04-03T01:00:00Z",
    "dateReserved": "2011-02-24T00:00:00Z",
    "dateUpdated": "2024-08-06T22:14:27.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-4251

Vulnerability from cvelistv5

Published

2011-05-26 16:00

Modified

2024-08-07 03:34

Severity ?

Summary

The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests.

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/520102/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/46397	third-party-advisory, x_refsource_SECUNIA
	http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/46637	vdb-entry, x_refsource_BID
	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	x_refsource_CONFIRM
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=657303	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8eae939f1400326b06d0c9afe53d2a484a326871	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:34:37.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
          },
          {
            "name": "46397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/46397"
          },
          {
            "name": "[netdev] 20100302 [PATCH 1/8] net: add limit for socket backlog",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread"
          },
          {
            "name": "46637",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46637"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8eae939f1400326b06d0c9afe53d2a484a326871"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
        },
        {
          "name": "46397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/46397"
        },
        {
          "name": "[netdev] 20100302 [PATCH 1/8] net: add limit for socket backlog",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread"
        },
        {
          "name": "46637",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46637"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=657303"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8eae939f1400326b06d0c9afe53d2a484a326871"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2010-4251",
    "datePublished": "2011-05-26T16:00:00",
    "dateReserved": "2010-11-16T00:00:00",
    "dateUpdated": "2024-08-07T03:34:37.980Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1090

Vulnerability from cvelistv5

Published

2011-05-09 19:00

Modified

2024-08-06 22:14

Severity ?

Summary

The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.

References

▼	URL	Tags
	http://openwall.com/lists/oss-security/2011/03/07/2	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/archive/1/520102/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/46397	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1025336	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.redhat.com/show_bug.cgi?id=682641	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	x_refsource_CONFIRM
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/03/07/12	mailing-list, x_refsource_MLIST
	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.339Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110307 CVE request - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/07/2"
          },
          {
            "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
          },
          {
            "name": "46397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/46397"
          },
          {
            "name": "1025336",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025336"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=682641"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc"
          },
          {
            "name": "[oss-security] 20110307 Re: CVE request - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/07/12"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110307 CVE request - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/07/2"
        },
        {
          "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
        },
        {
          "name": "46397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/46397"
        },
        {
          "name": "1025336",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025336"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=682641"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e9e3d724e2145f5039b423c290ce2b2c3d8f94bc"
        },
        {
          "name": "[oss-security] 20110307 Re: CVE request - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/07/12"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1090",
    "datePublished": "2011-05-09T19:00:00",
    "dateReserved": "2011-02-24T00:00:00",
    "dateUpdated": "2024-08-06T22:14:27.339Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1494

Vulnerability from cvelistv5

Published

2011-05-03 19:00

Modified

2024-08-06 22:28

Severity ?

Summary

Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.

References

▼	URL	Tags
	http://lkml.org/lkml/2011/4/5/327	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2011/04/05/32	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/archive/1/520102/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/46397	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=694021	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/04/06/2	mailing-list, x_refsource_MLIST
	https://patchwork.kernel.org/patch/688021/	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2011-0833.html	vendor-advisory, x_refsource_REDHAT
	http://downloads.avaya.com/css/P8/documents/100145416	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/47185	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.770Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[linux-kernel] 20110405 [PATCH] drivers/scsi/mpt2sas: prevent heap overflows and unchecked reads",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2011/4/5/327"
          },
          {
            "name": "[oss-security] 20110405 CVE request: kernel: two issues in mpt2sas",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/04/05/32"
          },
          {
            "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
          },
          {
            "name": "46397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/46397"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
          },
          {
            "name": "[oss-security] 20110406 Re: CVE request: kernel: two issues in mpt2sas",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/04/06/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/688021/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
          },
          {
            "name": "RHSA-2011:0833",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.avaya.com/css/P8/documents/100145416"
          },
          {
            "name": "47185",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/47185"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-04-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[linux-kernel] 20110405 [PATCH] drivers/scsi/mpt2sas: prevent heap overflows and unchecked reads",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lkml.org/lkml/2011/4/5/327"
        },
        {
          "name": "[oss-security] 20110405 CVE request: kernel: two issues in mpt2sas",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/04/05/32"
        },
        {
          "name": "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/520102/100/0/threaded"
        },
        {
          "name": "46397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/46397"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=694021"
        },
        {
          "name": "[oss-security] 20110406 Re: CVE request: kernel: two issues in mpt2sas",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/04/06/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/patch/688021/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2011-0012.html"
        },
        {
          "name": "RHSA-2011:0833",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2011-0833.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.avaya.com/css/P8/documents/100145416"
        },
        {
          "name": "47185",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/47185"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1494",
    "datePublished": "2011-05-03T19:00:00",
    "dateReserved": "2011-03-21T00:00:00",
    "dateUpdated": "2024-08-06T22:28:41.770Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature