p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in kgraft-patch-sle12-sp1_update_18

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für kgraft-patch-sle12-sp1_update_18: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 10

  1. SUSE-SU-2018:2100-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from another process via a speculative execution side channel (bsc#1090338, bsc#1096740).

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 10-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. SUSE-SU-2018:1531-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Li

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 9-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. SUSE-SU-2018:1254-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issues were fixed: - CVE-2018-1000199: A bug in x86 debug register handling of ptrace() could lead to memory corruption, possibly a denial of service or privilege escalation (bsc#1090036). - CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allowed attackers to gain privileges via unspecified vectors (bsc#1088268).

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 8-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. SUSE-SU-2018:0992-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. (bsc#1085447). - CVE-2018-1068: A flaw was found in the Linux kernels implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory (bsc#1085114). - CVE-2018-1000004: A race condition vulnerability existed in the sound system, which could lead to a deadlock and denial of service condition (bsc#1076017)

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 7-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. SUSE-SU-2018:0268-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnep_add_connection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted application (bsc#1071471).

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 6-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. SUSE-SU-2017:3313-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrm_user.c allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708). - CVE-2017-10661: Race condition in fs/timerfd.c allowed local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing (bsc#105315

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 5-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. SUSE-SU-2017:3152-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security issues were fixed: - CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346 (bsc#1064392) - CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allowed reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to rep

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 4-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. SUSE-SU-2017:2797-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 18 for SLE 12 SP1

    This update for the Linux Kernel 3.12.74-60_64_51 fixes one issue. The following security bugs were fixed: - CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call (bsc#1045327). - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bsc#1057950).

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 3-4.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. SUSE-SU-2017:2447-1

    Nicht bewertetKorrektur verfügbar

    Security update for Linux Kernel Live Patch 18 for SLE 12 SP1

    This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues. The following security bugs were fixed: - CVE-2017-1000112: Prevent a race condition in net-packet code that could have been exploited by unprivileged users to gain root access (bsc#1052368). - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel was too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1038564, bsc#1042892). - CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c i

    kgraft-patch-sle12-sp1_update_18Betriebssysteme
    • Auf 2-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →