p PatchFirst

PatchFirst · Latest vulnerabilities

kgraft-patch-sle12-sp4_update_5 vulnerabilities

Vulnerabilities published for kgraft-patch-sle12-sp4_update_5 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 8

  1. SUSE-SU-2020:1758-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_19 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437). - CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140). - CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 9-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2020:1475-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254). - CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 8-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2020:0868-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631) - CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 7-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2019:3230-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). The following bugs were fixed: - Fixed boot up hang r

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 5-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2019:2829-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 4-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. SUSE-SU-2019:2572-1

    Not ratedFix available

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 3-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. SUSE-SU-2019:1530-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a kernel panic. - CVE-2019-11478: It was possible to send a crafted sequence of SACKs which will fragment the TCP retransmission queue. An attacker may have been able to further exploit the fragmented queue to cause an expensive linked-list walk for subsequent SACKs received for that same TCP connection. - CVE-2019-11479: An attacker could force the Linux kernel to segment its responses int

    kgraft-patch-sle12-sp4_update_5Operating systems
    • Update to 1-6.3.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →