p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in kgraft-patch-sle12-sp1_update_12

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für kgraft-patch-sle12-sp1_update_12: 0. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 4

  1. SUSE-SU-2017:1294-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 12 for SLE 12 SP1

    This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds wr

    • Auf 4-2.1 aktualisieren
    Veröffentlicht Aktualisiert
  2. SUSE-SU-2017:0871-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 12 for SLE 12 SP1

    This update for the Linux Kernel 3.12.69-60_64_29 fixes one issue. The following security bugs were fixed: - CVE-2017-7184: The XFRM processsing in the Linux kernel 16.10 allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) via an integer overflow, as demonstrated during a Pwn2Own competition at CanSecWest 2017 (bsc#1030575).

    • Auf 3-2.1 aktualisieren
    Veröffentlicht Aktualisiert
  3. SUSE-SU-2017:0786-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 12 for SLE 12 SP1

    This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues. The following security bug was fixed: - CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bsc#1025013). The following non-security bug was fixed: - Fix for a 'Data miscompare on a read' which was observed during the rebuilding of degraded MDRAID VDs. (bsc#1025254)

    • Auf 2-2.1 aktualisieren
    Veröffentlicht Aktualisiert
  4. SUSE-SU-2017:0464-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.69 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-8962: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call (bnc#1010501). - CVE-2015-8963: Race condition in kernel/events/core.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect handling of an swevent data str

    • Auf 1-4.1 aktualisieren
    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →