rhsa-2014_0439
Vulnerability from csaf_redhat
Published
2014-04-28 16:43
Modified
2024-09-13 08:52
Summary
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Notes

Topic
Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
Details
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. * A denial of service flaw was found in the way the Linux kernel's IPv6 implementation processed IPv6 router advertisement (RA) packets. An attacker able to send a large number of RA packets to a target system could potentially use this flaw to crash the target system. (CVE-2014-2309, Important) * A flaw was found in the way the Linux kernel's netfilter connection tracking implementation for Datagram Congestion Control Protocol (DCCP) packets used the skb_header_pointer() function. A remote attacker could use this flaw to send a specially crafted DCCP packet to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-2523, Important) * A flaw was found in the way the Linux kernel's CIFS implementation handled uncached write operations with specially crafted iovec structures. An unprivileged local user with access to a CIFS share could use this flaw to crash the system, leak kernel memory, or, potentially, escalate their privileges on the system. (CVE-2014-0069, Moderate) * A flaw was found in the way the Linux kernel handled pending Floating Pointer Unit (FPU) exceptions during the switching of tasks. A local attacker could use this flaw to terminate arbitrary processes on the system, causing a denial of service, or, potentially, escalate their privileges on the system. Note that this flaw only affected systems using AMD CPUs on both 32-bit and 64-bit architectures. (CVE-2014-1438, Moderate) * It was found that certain protocol handlers in the Linux kernel's networking implementation could set the addr_len value without initializing the associated data structure. A local, unprivileged user could use this flaw to leak kernel stack memory to user space using the recvmsg, recvfrom, and recvmmsg system calls. (CVE-2013-7263, CVE-2013-7265, Low) * An information leak flaw was found in the Linux kernel's netfilter connection tracking IRC NAT helper implementation that could allow a remote attacker to disclose portions of kernel stack memory during IRC DCC (Direct Client-to-Client) communication over NAT. (CVE-2014-1690, Low) * A denial of service flaw was discovered in the way the Linux kernel's SELinux implementation handled files with an empty SELinux security context. A local user who has the CAP_MAC_ADMIN capability could use this flaw to crash the system. (CVE-2014-1874, Low) Red Hat would like to thank Al Viro for reporting CVE-2014-0069. The CVE-2014-1690 issue was discovered by Daniel Borkmann of Red Hat. This update also fixes several bugs and adds multiple enhancements. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section. Users are advised to upgrade to these updated packages, which upgrade the kernel-rt kernel to version kernel-rt-3.10.33-rt32.33, correct these issues, and fix the bugs and add the enhancements noted in the Red Hat Enterprise MRG 2 Technical Notes. The system must be rebooted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kernel-rt packages that fix multiple security issues, several bugs,\nand add various enhancements are now available for Red Hat Enterprise MRG\n2.5.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages contain the Linux kernel, the core of any Linux\noperating system.\n\n* A denial of service flaw was found in the way the Linux kernel\u0027s IPv6\nimplementation processed IPv6 router advertisement (RA) packets.\nAn attacker able to send a large number of RA packets to a target system\ncould potentially use this flaw to crash the target system. (CVE-2014-2309,\nImportant)\n\n* A flaw was found in the way the Linux kernel\u0027s netfilter connection\ntracking implementation for Datagram Congestion Control Protocol (DCCP)\npackets used the skb_header_pointer() function. A remote attacker could use\nthis flaw to send a specially crafted DCCP packet to crash the system or,\npotentially, escalate their privileges on the system. (CVE-2014-2523,\nImportant)\n\n* A flaw was found in the way the Linux kernel\u0027s CIFS implementation\nhandled uncached write operations with specially crafted iovec structures.\nAn unprivileged local user with access to a CIFS share could use this flaw\nto crash the system, leak kernel memory, or, potentially, escalate their\nprivileges on the system. (CVE-2014-0069, Moderate)\n\n* A flaw was found in the way the Linux kernel handled pending Floating\nPointer Unit (FPU) exceptions during the switching of tasks. A local\nattacker could use this flaw to terminate arbitrary processes on the\nsystem, causing a denial of service, or, potentially, escalate their\nprivileges on the system. Note that this flaw only affected systems using\nAMD CPUs on both 32-bit and 64-bit architectures. (CVE-2014-1438, Moderate)\n\n* It was found that certain protocol handlers in the Linux kernel\u0027s\nnetworking implementation could set the addr_len value without initializing\nthe associated data structure. A local, unprivileged user could use this\nflaw to leak kernel stack memory to user space using the recvmsg, recvfrom,\nand recvmmsg system calls. (CVE-2013-7263, CVE-2013-7265, Low)\n\n* An information leak flaw was found in the Linux kernel\u0027s netfilter\nconnection tracking IRC NAT helper implementation that could allow a remote\nattacker to disclose portions of kernel stack memory during IRC DCC (Direct\nClient-to-Client) communication over NAT. (CVE-2014-1690, Low)\n\n* A denial of service flaw was discovered in the way the Linux kernel\u0027s\nSELinux implementation handled files with an empty SELinux security\ncontext. A local user who has the CAP_MAC_ADMIN capability could use this\nflaw to crash the system. (CVE-2014-1874, Low)\n\nRed Hat would like to thank Al Viro for reporting CVE-2014-0069.\nThe CVE-2014-1690 issue was discovered by Daniel Borkmann of Red Hat.\n\nThis update also fixes several bugs and adds multiple enhancements.\nDocumentation for these changes will be available shortly from the\nTechnical Notes document linked to in the References section.\n\nUsers are advised to upgrade to these updated packages, which upgrade the\nkernel-rt kernel to version kernel-rt-3.10.33-rt32.33, correct these\nissues, and fix the bugs and add the enhancements noted in the Red Hat\nEnterprise MRG 2 Technical Notes. The system must be rebooted for this\nupdate to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0439",
        "url": "https://access.redhat.com/errata/RHSA-2014:0439"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html",
        "url": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html"
      },
      {
        "category": "external",
        "summary": "1016735",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1016735"
      },
      {
        "category": "external",
        "summary": "1032245",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1032245"
      },
      {
        "category": "external",
        "summary": "1035875",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1035875"
      },
      {
        "category": "external",
        "summary": "1052914",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052914"
      },
      {
        "category": "external",
        "summary": "1058748",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1058748"
      },
      {
        "category": "external",
        "summary": "1058848",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1058848"
      },
      {
        "category": "external",
        "summary": "1062356",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062356"
      },
      {
        "category": "external",
        "summary": "1064253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1064253"
      },
      {
        "category": "external",
        "summary": "1067880",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1067880"
      },
      {
        "category": "external",
        "summary": "1074471",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1074471"
      },
      {
        "category": "external",
        "summary": "1077343",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077343"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2014/rhsa-2014_0439.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-09-13T08:52:10+00:00",
      "generator": {
        "date": "2024-09-13T08:52:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.33.3"
        }
      },
      "id": "RHSA-2014:0439",
      "initial_release_date": "2014-04-28T16:43:49+00:00",
      "revision_history": [
        {
          "date": "2014-04-28T16:43:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-04-28T16:43:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-09-13T08:52:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
                "product": {
                  "name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
                  "product_id": "6Server-MRG-Realtime-2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise MRG for RHEL-6"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla-debuginfo@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla-devel@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.33-rt32.33.el6rt?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
                "product": {
                  "name": "kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
                  "product_id": "kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-firmware@3.10.33-rt32.33.el6rt?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
                "product": {
                  "name": "kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
                  "product_id": "kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.33-rt32.33.el6rt?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.33-rt32.33.el6rt.src",
                "product": {
                  "name": "kernel-rt-0:3.10.33-rt32.33.el6rt.src",
                  "product_id": "kernel-rt-0:3.10.33-rt32.33.el6rt.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.33-rt32.33.el6rt?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.33-rt32.33.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src"
        },
        "product_reference": "kernel-rt-0:3.10.33-rt32.33.el6rt.src",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch"
        },
        "product_reference": "kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Vladimir Davydov"
          ],
          "organization": "Parallels"
        }
      ],
      "cve": "CVE-2013-4483",
      "discovery_date": "2013-10-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1024854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the way the ipc_rcu_putref() function in the Linux kernel\u0027s IPC implementation handled reference counter decrementing. A local, unprivileged user could use this flaw to trigger an Out of Memory (OOM) condition and, potentially, crash the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ipc: ipc_rcu_putref refcount races",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does affect Linux kernel packages as shipped with Red Hat Enterprise Linux 6. Future kernel updates for respective releases may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4483"
        },
        {
          "category": "external",
          "summary": "RHBZ#1024854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1024854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4483",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4483"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4483",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4483"
        }
      ],
      "release_date": "2013-10-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: ipc: ipc_rcu_putref refcount races"
    },
    {
      "cve": "CVE-2013-7263",
      "discovery_date": "2013-11-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1035875"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: net: leakage of uninitialized memory to user-space via recv syscalls",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-7263"
        },
        {
          "category": "external",
          "summary": "RHBZ#1035875",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1035875"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7263",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-7263"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7263",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7263"
        }
      ],
      "release_date": "2013-11-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Kernel: net: leakage of uninitialized memory to user-space via recv syscalls"
    },
    {
      "cve": "CVE-2013-7265",
      "discovery_date": "2013-11-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1035875"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: net: leakage of uninitialized memory to user-space via recv syscalls",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with\nRed Hat Enterprise Linux 5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-7265"
        },
        {
          "category": "external",
          "summary": "RHBZ#1035875",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1035875"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7265",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-7265"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7265",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7265"
        }
      ],
      "release_date": "2013-11-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Kernel: net: leakage of uninitialized memory to user-space via recv syscalls"
    },
    {
      "cve": "CVE-2013-7339",
      "discovery_date": "2014-03-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1079214"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference flaw was found in the rds_ib_laddr_check() function in the Linux kernel\u0027s implementation of Reliable Datagram Sockets (RDS). A local, unprivileged user could use this flaw to crash the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: rds: dereference of a NULL device in rds_ib_laddr_check()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-7339"
        },
        {
          "category": "external",
          "summary": "RHBZ#1079214",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1079214"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-7339",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-7339"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-7339",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7339"
        }
      ],
      "release_date": "2013-12-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: net: rds: dereference of a NULL device in rds_ib_laddr_check()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Al Viro"
          ]
        }
      ],
      "cve": "CVE-2014-0069",
      "discovery_date": "2014-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1064253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: cifs: incorrect handling of bogus user pointers during uncached writes",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0069"
        },
        {
          "category": "external",
          "summary": "RHBZ#1064253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1064253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0069",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0069"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0069",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0069"
        }
      ],
      "release_date": "2014-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: cifs: incorrect handling of bogus user pointers during uncached writes"
    },
    {
      "cve": "CVE-2014-1438",
      "discovery_date": "2014-01-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1052914"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: x86: exceptions are not cleared in AMD FXSAVE workaround",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1438"
        },
        {
          "category": "external",
          "summary": "RHBZ#1052914",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052914"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1438",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1438"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1438",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1438"
        }
      ],
      "release_date": "2013-12-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: x86: exceptions are not cleared in AMD FXSAVE workaround"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Daniel Borkmann"
          ],
          "organization": "Red Hat Inc",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2014-1690",
      "discovery_date": "2014-01-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1058748"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1690"
        },
        {
          "category": "external",
          "summary": "RHBZ#1058748",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1058748"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1690",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1690"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1690",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1690"
        }
      ],
      "release_date": "2013-12-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper"
    },
    {
      "cve": "CVE-2014-1874",
      "discovery_date": "2014-02-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1062356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: SELinux: local denial-of-service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1874"
        },
        {
          "category": "external",
          "summary": "RHBZ#1062356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1062356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1874",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1874"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1874",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1874"
        }
      ],
      "release_date": "2014-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.4,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:M/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Kernel: SELinux: local denial-of-service"
    },
    {
      "cve": "CVE-2014-2309",
      "discovery_date": "2014-03-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1074471"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: net: IPv6: crash due to router advertisement flooding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with\nRed Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2309"
        },
        {
          "category": "external",
          "summary": "RHBZ#1074471",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1074471"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2309",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2309"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2309",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2309"
        }
      ],
      "release_date": "2014-03-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kernel: net: IPv6: crash due to router advertisement flooding"
    },
    {
      "cve": "CVE-2014-2523",
      "discovery_date": "2014-03-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1077343"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of the kernel package as shipped with\nRed Hat Enterprise Linux 5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-2523"
        },
        {
          "category": "external",
          "summary": "RHBZ#1077343",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1077343"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2523",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-2523"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2523",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2523"
        }
      ],
      "release_date": "2014-01-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.6,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.