p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in kgraft-patch-sle12-sp2_update_21

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für kgraft-patch-sle12-sp2_update_21: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 10

  1. SUSE-SU-2019:0683-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_80 fixes several issues. The following security issues were fixed: - CVE-2019-9213: Expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bsc#1128378). - CVE-2019-7221: Fixed a user-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124734). - CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandled

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 10-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. SUSE-SU-2019:0356-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_95 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947).

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 9-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. SUSE-SU-2018:4127-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.114-92_64 fixes one issue. The following security issue was fixed: - CVE-2018-5848: Fixed an unsigned integer overflow in wmi_set_ie. This could lead to a buffer overflow (bsc#1097356).

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 8-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. SUSE-SU-2018:3792-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_85 fixes one issue. The following security issue was fixed: - CVE-2018-5391: Fixed a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may have caused a denial of service condition by sending specially crafted IP fragments. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098).

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 7-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. SUSE-SU-2018:3173-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.114-92_64 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bsc#1110233). - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 6-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. SUSE-SU-2018:2864-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_85 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to a denial of service (bsc#1102682). - CVE-2018-10938: Fixed an infinite loop in the cipso_v4_optptr() function leading to a denial-of-service via crafted network packets (bsc#1106191). - CVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which lead to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_st

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 5-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. SUSE-SU-2018:2389-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_85 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system (bsc#1099306). - CVE-2018-10853: A flaw was found in kvm. In which certain instructions such as sgdt/sidt call segmented_write_std didn't propagate access correctly. As such, during userspace induced exception, the guest can incorrec

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 4-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. SUSE-SU-2018:1949-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_73 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from another process via a speculative execution side channel (bsc#1090338, bsc#1096740).

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 3-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. SUSE-SU-2018:1508-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_73 fixes one issue. The following security issue was fixed: - CVE-2018-1000199: - CVE-2018-1000199: An address corruption flaw was discovered while modifying a h/w breakpoint via 'modify_user_hw_breakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to potentially escalate privileges on a the system. (bsc#1090036).

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 2-2.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. SUSE-SU-2018:1173-1

    Nicht bewertetKorrektur verfügbar

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to 4.4.121 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-8781: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c had an integer-overflow vulnerability that allowed local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space (bnc#1090643). - CVE-2018-10124: The kill_something_info function in kernel/signal.c might have allowed local users to cause a denial of service via an INT_MIN argument (bnc#1089752). - CVE-2018-10087: The kern

    kgraft-patch-sle12-sp2_update_21Betriebssysteme
    • Auf 1-3.3.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →