rhsa-2012_0010
Vulnerability from csaf_redhat
Published
2012-01-10 20:10
Modified
2024-11-05 17:39
Summary
Red Hat Security Advisory: kernel-rt security and bug fix update
Notes
Topic
Updated kernel-rt packages that fix several security issues and two bugs
are now available for Red Hat Enterprise MRG 2.0.
The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details
The kernel-rt packages contain the Linux kernel, the core of any Linux
operating system.
This update fixes the following security issues:
* A malicious CIFS (Common Internet File System) server could send a
specially-crafted response to a directory read request that would result in
a denial of service or privilege escalation on a system that has a CIFS
share mounted. (CVE-2011-3191, Important)
* The way fragmented IPv6 UDP datagrams over the bridge with UDP
Fragmentation Offload (UFO) functionality on were handled could allow a
remote attacker to cause a denial of service. (CVE-2011-4326, Important)
* GRO (Generic Receive Offload) fields could be left in an inconsistent
state. An attacker on the local network could use this flaw to cause a
denial of service. GRO is enabled by default in all network drivers that
support it. (CVE-2011-2723, Moderate)
* IPv4 and IPv6 protocol sequence number and fragment ID generation could
allow a man-in-the-middle attacker to inject packets and possibly hijack
connections. Protocol sequence numbers and fragment IDs are now more
random. (CVE-2011-3188, Moderate)
* A flaw in the FUSE (Filesystem in Userspace) implementation could allow
a local user in the fuse group who has access to mount a FUSE file system
to cause a denial of service. (CVE-2011-3353, Moderate)
* A flaw in the b43 driver. If a system had an active wireless interface
that uses the b43 driver, an attacker able to send a specially-crafted
frame to that interface could cause a denial of service. (CVE-2011-3359,
Moderate)
* A flaw in the way CIFS shares with DFS referrals at their root were
handled could allow an attacker on the local network, who is able to deploy
a malicious CIFS server, to create a CIFS network share that, when mounted,
would cause the client system to crash. (CVE-2011-3363, Moderate)
* A flaw in the m_stop() implementation could allow a local, unprivileged
user to trigger a denial of service. (CVE-2011-3637, Moderate)
* Flaws in ghash_update() and ghash_final() could allow a local,
unprivileged user to cause a denial of service. (CVE-2011-4081, Moderate)
* A flaw in the key management facility could allow a local, unprivileged
user to cause a denial of service via the keyctl utility. (CVE-2011-4110,
Moderate)
* A flaw in the Journaling Block Device (JBD) could allow a local attacker
to crash the system by mounting a specially-crafted ext3 or ext4 disk.
(CVE-2011-4132, Moderate)
* A flaw in the way memory containing security-related data was handled in
tpm_read() could allow a local, unprivileged user to read the results of a
previously run TPM command. (CVE-2011-1162, Low)
* I/O statistics from the taskstats subsystem could be read without any
restrictions, which could allow a local, unprivileged user to gather
confidential information, such as the length of a password used in a
process. (CVE-2011-2494, Low)
* Flaws in tpacket_rcv() and packet_recvmsg() could allow a local,
unprivileged user to leak information to user-space. (CVE-2011-2898, Low)
Red Hat would like to thank Darren Lavender for reporting CVE-2011-3191;
Brent Meshier for reporting CVE-2011-2723; Dan Kaminsky for reporting
CVE-2011-3188; Yogesh Sharma for reporting CVE-2011-3363; Nick Bowler for
reporting CVE-2011-4081; Peter Huewe for reporting CVE-2011-1162; and
Vasiliy Kulikov of Openwall for reporting CVE-2011-2494.
This update also fixes the following bugs:
* Previously, a mismatch in the build-id of the kernel-rt and the one in
the related debuginfo package caused failures in SystemTap and perf.
(BZ#768413)
* IBM x3650m3 systems were not able to boot the MRG Realtime kernel because
they require a pmcraid driver that was not available. The pmcraid driver is
included in this update. (BZ#753992)
Users should upgrade to these updated packages, which correct these issues.
The system must be rebooted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kernel-rt packages that fix several security issues and two bugs\nare now available for Red Hat Enterprise MRG 2.0.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel-rt packages contain the Linux kernel, the core of any Linux\noperating system.\n\nThis update fixes the following security issues:\n\n* A malicious CIFS (Common Internet File System) server could send a\nspecially-crafted response to a directory read request that would result in\na denial of service or privilege escalation on a system that has a CIFS\nshare mounted. (CVE-2011-3191, Important)\n\n* The way fragmented IPv6 UDP datagrams over the bridge with UDP\nFragmentation Offload (UFO) functionality on were handled could allow a\nremote attacker to cause a denial of service. (CVE-2011-4326, Important)\n\n* GRO (Generic Receive Offload) fields could be left in an inconsistent\nstate. An attacker on the local network could use this flaw to cause a\ndenial of service. GRO is enabled by default in all network drivers that\nsupport it. (CVE-2011-2723, Moderate)\n\n* IPv4 and IPv6 protocol sequence number and fragment ID generation could\nallow a man-in-the-middle attacker to inject packets and possibly hijack\nconnections. Protocol sequence numbers and fragment IDs are now more\nrandom. (CVE-2011-3188, Moderate)\n\n* A flaw in the FUSE (Filesystem in Userspace) implementation could allow\na local user in the fuse group who has access to mount a FUSE file system\nto cause a denial of service. (CVE-2011-3353, Moderate)\n\n* A flaw in the b43 driver. If a system had an active wireless interface\nthat uses the b43 driver, an attacker able to send a specially-crafted\nframe to that interface could cause a denial of service. (CVE-2011-3359,\nModerate)\n\n* A flaw in the way CIFS shares with DFS referrals at their root were\nhandled could allow an attacker on the local network, who is able to deploy\na malicious CIFS server, to create a CIFS network share that, when mounted,\nwould cause the client system to crash. (CVE-2011-3363, Moderate)\n\n* A flaw in the m_stop() implementation could allow a local, unprivileged\nuser to trigger a denial of service. (CVE-2011-3637, Moderate)\n\n* Flaws in ghash_update() and ghash_final() could allow a local,\nunprivileged user to cause a denial of service. (CVE-2011-4081, Moderate)\n\n* A flaw in the key management facility could allow a local, unprivileged\nuser to cause a denial of service via the keyctl utility. (CVE-2011-4110,\nModerate)\n\n* A flaw in the Journaling Block Device (JBD) could allow a local attacker\nto crash the system by mounting a specially-crafted ext3 or ext4 disk.\n(CVE-2011-4132, Moderate)\n\n* A flaw in the way memory containing security-related data was handled in\ntpm_read() could allow a local, unprivileged user to read the results of a\npreviously run TPM command. (CVE-2011-1162, Low)\n\n* I/O statistics from the taskstats subsystem could be read without any\nrestrictions, which could allow a local, unprivileged user to gather\nconfidential information, such as the length of a password used in a\nprocess. (CVE-2011-2494, Low)\n\n* Flaws in tpacket_rcv() and packet_recvmsg() could allow a local,\nunprivileged user to leak information to user-space. (CVE-2011-2898, Low)\n\nRed Hat would like to thank Darren Lavender for reporting CVE-2011-3191;\nBrent Meshier for reporting CVE-2011-2723; Dan Kaminsky for reporting\nCVE-2011-3188; Yogesh Sharma for reporting CVE-2011-3363; Nick Bowler for\nreporting CVE-2011-4081; Peter Huewe for reporting CVE-2011-1162; and\nVasiliy Kulikov of Openwall for reporting CVE-2011-2494.\n\nThis update also fixes the following bugs:\n\n* Previously, a mismatch in the build-id of the kernel-rt and the one in\nthe related debuginfo package caused failures in SystemTap and perf.\n(BZ#768413)\n\n* IBM x3650m3 systems were not able to boot the MRG Realtime kernel because\nthey require a pmcraid driver that was not available. The pmcraid driver is\nincluded in this update. (BZ#753992)\n\nUsers should upgrade to these updated packages, which correct these issues.\nThe system must be rebooted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0010",
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "716842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716842"
},
{
"category": "external",
"summary": "726552",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=726552"
},
{
"category": "external",
"summary": "728023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=728023"
},
{
"category": "external",
"summary": "732629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732629"
},
{
"category": "external",
"summary": "732658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732658"
},
{
"category": "external",
"summary": "732869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732869"
},
{
"category": "external",
"summary": "736761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736761"
},
{
"category": "external",
"summary": "738202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738202"
},
{
"category": "external",
"summary": "738291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738291"
},
{
"category": "external",
"summary": "747848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=747848"
},
{
"category": "external",
"summary": "749475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=749475"
},
{
"category": "external",
"summary": "751297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=751297"
},
{
"category": "external",
"summary": "753341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=753341"
},
{
"category": "external",
"summary": "755584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=755584"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0010.json"
}
],
"title": "Red Hat Security Advisory: kernel-rt security and bug fix update",
"tracking": {
"current_release_date": "2024-11-05T17:39:58+00:00",
"generator": {
"date": "2024-11-05T17:39:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2012:0010",
"initial_release_date": "2012-01-10T20:10:00+00:00",
"revision_history": [
{
"date": "2012-01-10T20:10:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-01-10T20:14:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-05T17:39:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
"product": {
"name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise MRG for RHEL-6"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-devel@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace-devel@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla-devel@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-devel@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-vanilla-debuginfo@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-trace@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product": {
"name": "kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_id": "kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@2.6.33.9-rt31.79.el6rt?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"product": {
"name": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"product_id": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt@2.6.33.9-rt31.79.el6rt?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"product": {
"name": "kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"product_id": "kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-firmware@2.6.33.9-rt31.79.el6rt?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"product": {
"name": "kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"product_id": "kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-rt-doc@2.6.33.9-rt31.79.el6rt?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src"
},
"product_reference": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch"
},
"product_reference": "kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch"
},
"product_reference": "kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
"product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
},
"product_reference": "kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"relates_to_product_reference": "6Server-MRG-Realtime-2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Peter Huewe"
]
}
],
"cve": "CVE-2011-1162",
"discovery_date": "2011-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732629"
}
],
"notes": [
{
"category": "description",
"text": "The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: tpm: infoleak",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-1162"
},
{
"category": "external",
"summary": "RHBZ#732629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-1162",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1162"
}
],
"release_date": "2011-03-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.2,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: tpm: infoleak"
},
{
"acknowledgments": [
{
"names": [
"Vasiliy Kulikov"
],
"organization": "Openwall"
}
],
"cve": "CVE-2011-2494",
"discovery_date": "2011-06-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "716842"
}
],
"notes": [
{
"category": "description",
"text": "kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user\u0027s password.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: taskstats io infoleak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not provide support for the Taskstats interface. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2494"
},
{
"category": "external",
"summary": "RHBZ#716842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=716842"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2494",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2494"
}
],
"release_date": "2011-06-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: taskstats io infoleak"
},
{
"acknowledgments": [
{
"names": [
"Brent Meshier"
]
}
],
"cve": "CVE-2011-2723",
"discovery_date": "2011-07-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "726552"
}
],
"notes": [
{
"category": "description",
"text": "The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: gro: only reset frag0 when skb can be pulled",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not backport the upstream commit a5b1cf28 that introduced this issue. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1350.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2723"
},
{
"category": "external",
"summary": "RHBZ#726552",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=726552"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2723",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2723"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2723",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2723"
},
{
"category": "external",
"summary": "http://git.kernel.org/linus/17dd759c67f21e34f2156abcf415e1f60605a188",
"url": "http://git.kernel.org/linus/17dd759c67f21e34f2156abcf415e1f60605a188"
}
],
"release_date": "2011-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 5.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: gro: only reset frag0 when skb can be pulled"
},
{
"cve": "CVE-2011-2898",
"discovery_date": "2011-08-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "728023"
}
],
"notes": [
{
"category": "description",
"text": "net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: af_packet: infoleak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 as they did not backport the upstream commit 393e52e3 that introduced this flaw. This has been addressed in Red Hat Enterprise Linux 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1350.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-2898"
},
{
"category": "external",
"summary": "RHBZ#728023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=728023"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-2898",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2898"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-2898",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2898"
}
],
"release_date": "2011-06-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "kernel: af_packet: infoleak"
},
{
"acknowledgments": [
{
"names": [
"Dan Kaminsky"
]
}
],
"cve": "CVE-2011-3188",
"discovery_date": "2011-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732658"
}
],
"notes": [
{
"category": "description",
"text": "The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: improve sequence number generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3188"
},
{
"category": "external",
"summary": "RHBZ#732658",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732658"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3188",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3188"
}
],
"release_date": "2011-08-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: net: improve sequence number generation"
},
{
"acknowledgments": [
{
"names": [
"Darren Lavender"
]
}
],
"cve": "CVE-2011-3191",
"discovery_date": "2011-08-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "732869"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: cifs: signedness issue in CIFSFindNext()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. It has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3191"
},
{
"category": "external",
"summary": "RHBZ#732869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=732869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3191",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3191"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3191",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3191"
}
],
"release_date": "2011-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: cifs: signedness issue in CIFSFindNext()"
},
{
"cve": "CVE-2011-3353",
"discovery_date": "2011-08-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "736761"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as they did not provide support for FUSE. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 as they did not backport the upstream commit 3b463ae0c6264f that introduced this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3353"
},
{
"category": "external",
"summary": "RHBZ#736761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=736761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3353",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3353"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3353",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3353"
}
],
"release_date": "2011-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message"
},
{
"cve": "CVE-2011-3359",
"discovery_date": "2011-03-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "738202"
}
],
"notes": [
{
"category": "description",
"text": "The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: b43: allocate receive buffers big enough for max frame len + offset",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of the Linux kernel as shipped with Red\nHat Enterprise Linux 4 and 5 as they did not provide support for Broadcom 43xx wireless devices. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3359"
},
{
"category": "external",
"summary": "RHBZ#738202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3359",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3359"
}
],
"release_date": "2011-03-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: b43: allocate receive buffers big enough for max frame len + offset"
},
{
"acknowledgments": [
{
"names": [
"Yogesh Sharma"
]
}
],
"cve": "CVE-2011-3363",
"discovery_date": "2011-03-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "738291"
}
],
"notes": [
{
"category": "description",
"text": "The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: cifs: always do is_path_accessible check in cifs_mount",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,\n5, 6, and Red Hat Enterprise MRG. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3363"
},
{
"category": "external",
"summary": "RHBZ#738291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=738291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3363",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3363"
}
],
"release_date": "2011-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: cifs: always do is_path_accessible check in cifs_mount"
},
{
"cve": "CVE-2011-3637",
"discovery_date": "2011-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "747848"
}
],
"notes": [
{
"category": "description",
"text": "The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: proc: fix oops on invalid /proc/\u003cpid\u003e/maps access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 4, and 6 as it did not backport the upstream commit ec6fd8a4 that introduced this issue. This has been addressed in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0007.html and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3637"
},
{
"category": "external",
"summary": "RHBZ#747848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=747848"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3637",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3637"
}
],
"release_date": "2011-03-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: proc: fix oops on invalid /proc/\u003cpid\u003e/maps access"
},
{
"acknowledgments": [
{
"names": [
"Nick Bowler"
]
}
],
"cve": "CVE-2011-4081",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2011-10-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "749475"
}
],
"notes": [
{
"category": "description",
"text": "crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: crypto: ghash: null pointer deref if no key is set",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, and 5 as they did not include support for the GHASH message digest algorithm. This has been addressed in Red Hat Enterprise Linux 6, and MRG via https://rhn.redhat.com/errata/RHSA-2012-0350.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-4081"
},
{
"category": "external",
"summary": "RHBZ#749475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=749475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-4081",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4081"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4081",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4081"
}
],
"release_date": "2011-10-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: crypto: ghash: null pointer deref if no key is set"
},
{
"cve": "CVE-2011-4110",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2011-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "751297"
}
],
"notes": [
{
"category": "description",
"text": "The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and \"updating a negative key into a fully instantiated key.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: keys: NULL pointer deref in the user-defined key type",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,\n5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1479.html, https://rhn.redhat.com/errata/RHSA-2011-1530.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-4110"
},
{
"category": "external",
"summary": "RHBZ#751297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=751297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-4110",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4110"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4110",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4110"
}
],
"release_date": "2011-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: keys: NULL pointer deref in the user-defined key type"
},
{
"cve": "CVE-2011-4132",
"discovery_date": "2011-04-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "753341"
}
],
"notes": [
{
"category": "description",
"text": "The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an \"invalid log first block value.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: jbd/jbd2: invalid value of first log block leads to oops",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,\n5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0007.html, https://rhn.redhat.com/errata/RHSA-2012-0350.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat\nEnterprise Linux 4 is now in Production 3 of the maintenance life-cycle,\nhttps://access.redhat.com/support/policy/updates/errata/, therefore the fix for\nthis issue is not currently planned to be included in the future updates.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-4132"
},
{
"category": "external",
"summary": "RHBZ#753341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=753341"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-4132",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4132"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4132",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4132"
}
],
"release_date": "2011-11-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 4.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: jbd/jbd2: invalid value of first log block leads to oops"
},
{
"cve": "CVE-2011-4326",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2011-03-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "755584"
}
],
"notes": [
{
"category": "description",
"text": "The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: wrong headroom check in udp6_ufo_fragment()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 4 and 5 as they did not provide support for UDP Fragmentation Offload (UFO) functionality. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-4326"
},
{
"category": "external",
"summary": "RHBZ#755584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=755584"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-4326",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4326"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4326",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4326"
}
],
"release_date": "2011-03-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-01-10T20:10:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not\nuse \"rpm -Uvh\" as that will remove the running kernel binaries from\nyour system. You may use \"rpm -e\" to remove old kernels after\ndetermining that the new kernel functions properly on your system.",
"product_ids": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0010"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"products": [
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.src",
"6Server-MRG-Realtime-2:kernel-rt-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-doc-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-firmware-0:2.6.33.9-rt31.79.el6rt.noarch",
"6Server-MRG-Realtime-2:kernel-rt-trace-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:2.6.33.9-rt31.79.el6rt.x86_64",
"6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:2.6.33.9-rt31.79.el6rt.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: wrong headroom check in udp6_ufo_fragment()"
}
]
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.