p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de kernel-livepatch-sle15-sp1_update_1

Vulnerabilidades publicadas para kernel-livepatch-sle15-sp1_update_1 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 10

  1. SUSE-SU-2020:1656-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-13233: Fixed a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1144502). - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437). - CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140). - CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).

    • Actualiza a 11-2.1
    Publicación Actualización
  2. SUSE-SU-2020:1475-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254). - CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).

    • Actualiza a 10-2.1
    Publicación Actualización
  3. SUSE-SU-2020:0868-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631) - CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).

    • Actualiza a 9-2.1
    Publicación Actualización
  4. SUSE-SU-2019:3249-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_4 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). The following bugs were fixed: - Fixed boot up hang re

    • Actualiza a 7-2.1
    Publicación Actualización
  5. SUSE-SU-2019:2829-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).

    • Actualiza a 6-2.1
    Publicación Actualización
  6. SUSE-SU-2019:2572-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).

    • Actualiza a 5-2.1
    Publicación Actualización
  7. SUSE-SU-2019:2232-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes one issue. The following security issue was fixed: - CVE-2019-13233: Fixed use-after-free for access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1140454).

    • Actualiza a 4-2.1
    Publicación Actualización
  8. SUSE-SU-2019:1888-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_7 fixes one issue. The following security issue was fixed: This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).

    • Actualiza a 3-2.1
    Publicación Actualización
  9. SUSE-SU-2019:1769-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_4 fixes one issue. The following security issue was fixed: - CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel for powerpc had a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected (bsc#1138264).

    • Actualiza a 2-2.1
    Publicación Actualización
  10. SUSE-SU-2019:1550-1

    Sin evaluarCorrección disponible

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-12819: The function __mdiobus_register() called put_device(), which triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of service. (bsc#1138291) - CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This used to affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293) - CVE-2019-11477: A sequence of SA

    • Actualiza a 1-3.3.1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →