p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in kgraft-patch-sle12-sp1_update_11

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für kgraft-patch-sle12-sp1_update_11: 0. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 4

  1. SUSE-SU-2017:1290-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 11 for SLE 12 SP1

    This update for the Linux Kernel 3.12.67-60_64_24 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds wr

    • Auf 5-2.1 aktualisieren
    Veröffentlicht Aktualisiert
  2. SUSE-SU-2017:0886-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 11 for SLE 12 SP1

    This update for the Linux Kernel 3.12.67-60_64_24 fixes one issue. The following security bugs were fixed: - CVE-2017-7184: The XFRM processsing in the Linux kernel 16.10 allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) via an integer overflow, as demonstrated during a Pwn2Own competition at CanSecWest 2017 (bsc#1030575).

    • Auf 4-2.1 aktualisieren
    Veröffentlicht Aktualisiert
  3. SUSE-SU-2017:0776-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 11 for SLE 12 SP1

    This update for the Linux Kernel 3.12.67-60_64_24 fixes several issues. The following security bug was fixed: - CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bsc#1025013). The following non-security bug was fixed: - Fix for a 'Data miscompare on a read' which was observed during the rebuilding of degraded MDRAID VDs. (bsc#1025254)

    • Auf 3-2.1 aktualisieren
    Veröffentlicht Aktualisiert
  4. SUSE-SU-2016:3188-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). - CVE-2016-9794: A use-after-free vulnerability in the ALSA pcm layer allowed local users to cause a denial of service, memory corruption or possibly even to elevate their privileges (bsc#1013533).

    • Auf 1-2.1 aktualisieren
    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →