rhsa-2011_1189
Vulnerability from csaf_redhat
Published
2011-08-23 14:30
Modified
2024-09-15 19:19
Summary
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Notes
Topic
Updated kernel packages that fix several security issues, various bugs, and
add two enhancements are now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details
Security issues:
* Using PCI passthrough without interrupt remapping support allowed KVM
guests to generate MSI interrupts and thus potentially inject traps. A
privileged guest user could use this flaw to crash the host or possibly
escalate their privileges on the host. The fix for this issue can prevent
PCI passthrough working and guests starting. Refer to Red Hat Bugzilla bug
715555 for details. (CVE-2011-1898, Important)
* Flaw in the client-side NLM implementation could allow a local,
unprivileged user to cause a denial of service. (CVE-2011-2491, Important)
* Integer underflow in the Bluetooth implementation could allow a remote
attacker to cause a denial of service or escalate their privileges by
sending a specially-crafted request to a target system via Bluetooth.
(CVE-2011-2497, Important)
* Buffer overflows in the netlink-based wireless configuration interface
implementation could allow a local user, who has the CAP_NET_ADMIN
capability, to cause a denial of service or escalate their privileges on
systems that have an active wireless interface. (CVE-2011-2517, Important)
* Flaw in the way the maximum file offset was handled for ext4 file systems
could allow a local, unprivileged user to cause a denial of service.
(CVE-2011-2695, Important)
* Flaw allowed napi_reuse_skb() to be called on VLAN packets. An attacker
on the local network could use this flaw to send crafted packets to a
target, possibly causing a denial of service. (CVE-2011-1576, Moderate)
* Integer signedness error in next_pidmap() could allow a local,
unprivileged user to cause a denial of service. (CVE-2011-1593, Moderate)
* Race condition in the memory merging support (KSM) could allow a local,
unprivileged user to cause a denial of service. KSM is off by default, but
on systems running VDSM, or on KVM hosts, it is likely turned on by the
ksm/ksmtuned services. (CVE-2011-2183, Moderate)
* Flaw in inet_diag_bc_audit() could allow a local, unprivileged user to
cause a denial of service. (CVE-2011-2213, Moderate)
* Flaw in the way space was allocated in the Global File System 2 (GFS2)
implementation. If the file system was almost full, and a local,
unprivileged user made an fallocate() request, it could result in a denial
of service. Setting quotas to prevent users from using all available disk
space would prevent exploitation of this flaw. (CVE-2011-2689, Moderate)
* Local, unprivileged users could send signals via the sigqueueinfo system
call, with si_code set to SI_TKILL and with spoofed process and user IDs,
to other processes. This flaw does not allow existing permission checks to
be bypassed; signals can only be sent if your privileges allow you to
already do so. (CVE-2011-1182, Low)
* Heap overflow in the EFI GUID Partition Table (GPT) implementation could
allow a local attacker to cause a denial of service by mounting a disk
containing crafted partition tables. (CVE-2011-1776, Low)
* Structure padding in two structures in the Bluetooth implementation was
not initialized properly before being copied to user-space, possibly
allowing local, unprivileged users to leak kernel stack memory to
user-space. (CVE-2011-2492, Low)
* /proc/[PID]/io is world-readable by default. Previously, these files
could be read without any further restrictions. A local, unprivileged user
could read these files, belonging to other, possibly privileged processes
to gather confidential information, such as the length of a password used
in a process. (CVE-2011-2495, Low)
Red Hat would like to thank Vasily Averin for reporting CVE-2011-2491; Dan
Rosenberg for reporting CVE-2011-2497 and CVE-2011-2213; Ryan Sweat for
reporting CVE-2011-1576; Robert Swiecki for reporting CVE-2011-1593; Andrea
Righi for reporting CVE-2011-2183; Julien Tinnes of the Google Security
Team for reporting CVE-2011-1182; Timo Warns for reporting CVE-2011-1776;
Marek Kroemeke and Filip Palian for reporting CVE-2011-2492; and Vasiliy
Kulikov of Openwall for reporting CVE-2011-2495.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel packages that fix several security issues, various bugs, and\nadd two enhancements are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Security issues:\n\n* Using PCI passthrough without interrupt remapping support allowed KVM\nguests to generate MSI interrupts and thus potentially inject traps. A\nprivileged guest user could use this flaw to crash the host or possibly\nescalate their privileges on the host. The fix for this issue can prevent\nPCI passthrough working and guests starting. Refer to Red Hat Bugzilla bug\n715555 for details. (CVE-2011-1898, Important)\n\n* Flaw in the client-side NLM implementation could allow a local,\nunprivileged user to cause a denial of service. (CVE-2011-2491, Important)\n\n* Integer underflow in the Bluetooth implementation could allow a remote\nattacker to cause a denial of service or escalate their privileges by\nsending a specially-crafted request to a target system via Bluetooth.\n(CVE-2011-2497, Important)\n\n* Buffer overflows in the netlink-based wireless configuration interface\nimplementation could allow a local user, who has the CAP_NET_ADMIN\ncapability, to cause a denial of service or escalate their privileges on\nsystems that have an active wireless interface. (CVE-2011-2517, Important)\n\n* Flaw in the way the maximum file offset was handled for ext4 file systems\ncould allow a local, unprivileged user to cause a denial of service.\n(CVE-2011-2695, Important)\n\n* Flaw allowed napi_reuse_skb() to be called on VLAN packets. An attacker\non the local network could use this flaw to send crafted packets to a\ntarget, possibly causing a denial of service. (CVE-2011-1576, Moderate)\n\n* Integer signedness error in next_pidmap() could allow a local,\nunprivileged user to cause a denial of service. (CVE-2011-1593, Moderate)\n\n* Race condition in the memory merging support (KSM) could allow a local,\nunprivileged user to cause a denial of service. KSM is off by default, but\non systems running VDSM, or on KVM hosts, it is likely turned on by the\nksm/ksmtuned services. (CVE-2011-2183, Moderate)\n\n* Flaw in inet_diag_bc_audit() could allow a local, unprivileged user to\ncause a denial of service. (CVE-2011-2213, Moderate)\n\n* Flaw in the way space was allocated in the Global File System 2 (GFS2)\nimplementation. If the file system was almost full, and a local,\nunprivileged user made an fallocate() request, it could result in a denial\nof service. Setting quotas to prevent users from using all available disk\nspace would prevent exploitation of this flaw. (CVE-2011-2689, Moderate)\n\n* Local, unprivileged users could send signals via the sigqueueinfo system\ncall, with si_code set to SI_TKILL and with spoofed process and user IDs,\nto other processes. This flaw does not allow existing permission checks to\nbe bypassed; signals can only be sent if your privileges allow you to\nalready do so. (CVE-2011-1182, Low)\n\n* Heap overflow in the EFI GUID Partition Table (GPT) implementation could\nallow a local attacker to cause a denial of service by mounting a disk\ncontaining crafted partition tables. (CVE-2011-1776, Low)\n\n* Structure padding in two structures in the Bluetooth implementation was\nnot initialized properly before being copied to user-space, possibly\nallowing local, unprivileged users to leak kernel stack memory to\nuser-space. (CVE-2011-2492, Low)\n\n* /proc/[PID]/io is world-readable by default. Previously, these files\ncould be read without any further restrictions. A local, unprivileged user\ncould read these files, belonging to other, possibly privileged processes\nto gather confidential information, such as the length of a password used\nin a process. (CVE-2011-2495, Low)\n\nRed Hat would like to thank Vasily Averin for reporting CVE-2011-2491; Dan\nRosenberg for reporting CVE-2011-2497 and CVE-2011-2213; Ryan Sweat for\nreporting CVE-2011-1576; Robert Swiecki for reporting CVE-2011-1593; Andrea\nRighi for reporting CVE-2011-2183; Julien Tinnes of the Google Security\nTeam for reporting CVE-2011-1182; Timo Warns for reporting CVE-2011-1776;\nMarek Kroemeke and Filip Palian for reporting CVE-2011-2492; and Vasiliy\nKulikov of Openwall for reporting CVE-2011-2495.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2011:1189",
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html#RHSA-2011-1189",
"url": "https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html#RHSA-2011-1189"
},
{
"category": "external",
"summary": "690028",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=690028"
},
{
"category": "external",
"summary": "695173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=695173"
},
{
"category": "external",
"summary": "697822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=697822"
},
{
"category": "external",
"summary": "703019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=703019"
},
{
"category": "external",
"summary": "703026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=703026"
},
{
"category": "external",
"summary": "709393",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=709393"
},
{
"category": "external",
"summary": "710338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=710338"
},
{
"category": "external",
"summary": "713827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=713827"
},
{
"category": "external",
"summary": "714536",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=714536"
},
{
"category": "external",
"summary": "714982",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=714982"
},
{
"category": "external",
"summary": "715555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=715555"
},
{
"category": "external",
"summary": "716539",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716539"
},
{
"category": "external",
"summary": "716805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716805"
},
{
"category": "external",
"summary": "716825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716825"
},
{
"category": "external",
"summary": "718152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=718152"
},
{
"category": "external",
"summary": "720861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=720861"
},
{
"category": "external",
"summary": "722557",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=722557"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2011/rhsa-2011_1189.json"
}
],
"title": "Red Hat Security Advisory: kernel security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-09-15T19:19:09+00:00",
"generator": {
"date": "2024-09-15T19:19:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2011:1189",
"initial_release_date": "2011-08-23T14:30:00+00:00",
"revision_history": [
{
"date": "2011-08-23T14:30:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2011-08-23T10:41:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-15T19:19:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-headers-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-i686@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-debug-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "perf-0:2.6.32-131.12.1.el6.i686",
"product_id": "perf-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product_id": "perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-devel-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.12.1.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.12.1.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "perf-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "perf-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-ppc64@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-bootwrapper@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.12.1.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.12.1.el6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-devel@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "perf-0:2.6.32-131.12.1.el6.s390x",
"product_id": "perf-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-s390x@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_id": "perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.12.1.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product": {
"name": "kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_id": "kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-kdump-debuginfo@2.6.32-131.12.1.el6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-headers@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "perf-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "perf-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@2.6.32-131.12.1.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product_id": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@2.6.32-131.12.1.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"product": {
"name": "kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"product_id": "kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-firmware@2.6.32-131.12.1.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"product": {
"name": "kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"product_id": "kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@2.6.32-131.12.1.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:2.6.32-131.12.1.el6.src",
"product": {
"name": "kernel-0:2.6.32-131.12.1.el6.src",
"product_id": "kernel-0:2.6.32-131.12.1.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@2.6.32-131.12.1.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.12.1.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src"
},
"product_reference": "kernel-0:2.6.32-131.12.1.el6.src",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-debug-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-devel-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:2.6.32-131.12.1.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch"
},
"product_reference": "kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-firmware-0:2.6.32-131.12.1.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch"
},
"product_reference": "kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "kernel-headers-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "perf-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "perf-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "perf-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "perf-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"relates_to_product_reference": "6Server-6.1.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
},
"product_reference": "perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"relates_to_product_reference": "6Server-6.1.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Julien Tinnes"
],
"organization": "Google Security Team"
}
],
"cve": "CVE-2011-1182",
"discovery_date": "2011-03-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "690028"
}
],
"notes": [
{
"category": "description",
"text": "kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel signal spoofing issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This was addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html. A future kernel update in Red Hat Enterprise MRG may address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1182"
},
{
"category": "external",
"summary": "RHBZ#690028",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=690028"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1182",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1182"
}
],
"release_date": "2011-03-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel signal spoofing issue"
},
{
"acknowledgments": [
{
"names": [
"Ryan Sweat"
]
}
],
"cve": "CVE-2011-1576",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2011-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "695173"
}
],
"notes": [
{
"category": "description",
"text": "The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: Fix memory leak/corruption on VLAN GRO_DROP",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the version of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 as it did not support Generic Receive Offload (GRO). This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1576"
},
{
"category": "external",
"summary": "RHBZ#695173",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=695173"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1576",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1576"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1576",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1576"
}
],
"release_date": "2011-06-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 5.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net: Fix memory leak/corruption on VLAN GRO_DROP"
},
{
"acknowledgments": [
{
"names": [
"Robert Swiecki"
]
}
],
"cve": "CVE-2011-1593",
"discovery_date": "2011-04-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "697822"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: proc: signedness issue in next_pidmap()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1593"
},
{
"category": "external",
"summary": "RHBZ#697822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=697822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1593",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1593"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1593",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1593"
}
],
"release_date": "2011-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: proc: signedness issue in next_pidmap()"
},
{
"acknowledgments": [
{
"names": [
"Timo Warns"
]
}
],
"cve": "CVE-2011-1776",
"discovery_date": "2011-05-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "703026"
}
],
"notes": [
{
"category": "description",
"text": "The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: validate size of EFI GUID partition entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of Linux kernel as shipped with Red Hat\nEnterprise 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1776"
},
{
"category": "external",
"summary": "RHBZ#703026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=703026"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1776",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1776"
}
],
"release_date": "2011-05-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: validate size of EFI GUID partition entries"
},
{
"cve": "CVE-2011-1898",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"discovery_date": "2011-06-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "715555"
}
],
"notes": [
{
"category": "description",
"text": "Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by \"using DMA to generate MSI interrupts by writing to the interrupt injection registers.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "virt: VT-d (PCI passthrough) MSI trap injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did affect the versions of kernel package as shipped with Red Hat Enterprise Linux 5.\n\nThis issue did affect the versions of kvm package as shipped with Red Hat Enterprise Linux 5. Red Hat cannot backport the fix though as it is too invasive and has a high risk of introducing severe regressions at this point in the Red Hat Enterprise Linux 5 life-cycle. As such, Red Hat recommends that users of KVM on Red Hat Enterprise Linux 5 only use PCI passthrough with trusted guests. \n\nThis issue did affect the versions of kernel package as shipped with Red Hat Enterprise Linux 6.\n\nThis issue did not affect the versions of kernel-rt package as shipped with Red Hat Enterprise MRG as it did not provide support for virtualization.\n\nFor further info please refer to the knowledge base article https://access.redhat.com/knowledge/articles/66747.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1898"
},
{
"category": "external",
"summary": "RHBZ#715555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=715555"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1898",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1898"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1898",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1898"
}
],
"release_date": "2011-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.4,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "virt: VT-d (PCI passthrough) MSI trap injection"
},
{
"acknowledgments": [
{
"names": [
"Andrea Righi"
]
}
],
"cve": "CVE-2011-2183",
"discovery_date": "2011-06-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "710338"
}
],
"notes": [
{
"category": "description",
"text": "Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) is enabled, allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ksm: race between ksmd and exiting task",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG do not provide support for KSM (Kernel Samepage Merging). This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1189.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2183"
},
{
"category": "external",
"summary": "RHBZ#710338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=710338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2183",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2183"
}
],
"release_date": "2011-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ksm: race between ksmd and exiting task"
},
{
"acknowledgments": [
{
"names": [
"Dan Rosenberg"
]
}
],
"cve": "CVE-2011-2213",
"discovery_date": "2011-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "714536"
}
],
"notes": [
{
"category": "description",
"text": "The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: inet_diag: insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,\n5, 6, and Red Hat Enterprise MRG. Red Hat Enterprise Linux 4 is now in\nProduction 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2213"
},
{
"category": "external",
"summary": "RHBZ#714536",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=714536"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2213",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2213"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2213",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2213"
}
],
"release_date": "2011-06-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: inet_diag: insufficient validation"
},
{
"acknowledgments": [
{
"names": [
"Vasily Averin"
]
}
],
"cve": "CVE-2011-2491",
"discovery_date": "2011-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "709393"
}
],
"notes": [
{
"category": "description",
"text": "The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: rpc task leak after flock()ing NFS share",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2491"
},
{
"category": "external",
"summary": "RHBZ#709393",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=709393"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2491",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2491"
}
],
"release_date": "2011-05-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: rpc task leak after flock()ing NFS share"
},
{
"acknowledgments": [
{
"names": [
"Marek Kroemeke",
"Filip Palian"
]
}
],
"cve": "CVE-2011-2492",
"discovery_date": "2011-05-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "703019"
}
],
"notes": [
{
"category": "description",
"text": "The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2492"
},
{
"category": "external",
"summary": "RHBZ#703019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=703019"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2492",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2492"
}
],
"release_date": "2011-05-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace"
},
{
"acknowledgments": [
{
"names": [
"Vasiliy Kulikov"
],
"organization": "Openwall"
}
],
"cve": "CVE-2011-2495",
"discovery_date": "2011-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "716825"
}
],
"notes": [
{
"category": "description",
"text": "fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user\u0027s password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: /proc/PID/io infoleak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1212.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2495"
},
{
"category": "external",
"summary": "RHBZ#716825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2495",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2495"
}
],
"release_date": "2011-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: /proc/PID/io infoleak"
},
{
"acknowledgments": [
{
"names": [
"Dan Rosenberg"
]
}
],
"cve": "CVE-2011-2497",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2011-06-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "716805"
}
],
"notes": [
{
"category": "description",
"text": "Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: bluetooth: buffer overflow in l2cap config request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 as they did not backport the upstream commit 5dee9e7c that introduced this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2497"
},
{
"category": "external",
"summary": "RHBZ#716805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716805"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2497",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2497"
}
],
"release_date": "2011-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 8.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: bluetooth: buffer overflow in l2cap config request"
},
{
"cve": "CVE-2011-2517",
"discovery_date": "2011-06-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "718152"
}
],
"notes": [
{
"category": "description",
"text": "Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nl80211: missing check for valid SSID size in scan operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 as it did not provide support for the Linux wireless LAN (802.11) configuration API. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1212.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2517"
},
{
"category": "external",
"summary": "RHBZ#718152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=718152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2517",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2517"
}
],
"release_date": "2011-05-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.6,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: nl80211: missing check for valid SSID size in scan operations"
},
{
"cve": "CVE-2011-2689",
"discovery_date": "2011-07-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "720861"
}
],
"notes": [
{
"category": "description",
"text": "The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: gfs2: make sure fallocate bytes is a multiple of blksize",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and Red Hat Enterprise MRG as they did not provide support for the Global File System 2 (GFS2). This has been addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-1065.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2689"
},
{
"category": "external",
"summary": "RHBZ#720861",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=720861"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2689",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2689"
}
],
"release_date": "2011-04-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: gfs2: make sure fallocate bytes is a multiple of blksize"
},
{
"cve": "CVE-2011-2695",
"discovery_date": "2011-07-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "722557"
}
],
"notes": [
{
"category": "description",
"text": "Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ext4: kernel panic when writing data to the last block of sparse file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not include support for EXT4 filesystem.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2695"
},
{
"category": "external",
"summary": "RHBZ#722557",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=722557"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2695",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2695"
}
],
"release_date": "2011-06-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Refer to the Technical Notes, available shortly from the link in the\nReferences, for bug fix and enhancement details.\n\nUsers should upgrade to these updated packages, which contain\nbackported patches to correct these issues, and fix the bugs and add\nthe enhancements noted in the Technical Notes. The system must be\nrebooted for this update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2011:1189"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.src",
"6Server-6.1.z:kernel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-bootwrapper-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debug-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-debuginfo-common-i686-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-debuginfo-common-ppc64-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-debuginfo-common-s390x-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-debuginfo-common-x86_64-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-devel-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-doc-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-firmware-0:2.6.32-131.12.1.el6.noarch",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-headers-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:kernel-kdump-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:kernel-kdump-devel-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-0:2.6.32-131.12.1.el6.x86_64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.i686",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.ppc64",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.s390x",
"6Server-6.1.z:perf-debuginfo-0:2.6.32-131.12.1.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ext4: kernel panic when writing data to the last block of sparse file"
}
]
}
Loading...