Professional OVAL Repository
[Eng]
[Rus]
[Sign-In]
OVAL
Search
Categories
RedCheck
About
OVAL Definitions
OVAL Items
FSTEC Data Bank Information Security Threats
NKCKI
EOL (End Of Life)
Linux Security Advisories
Mozilla Foundation Security Advisory
IBM
VMware
Cisco
Check Point Software Technologies
Apache
Solaris
FreeBSD
Development
GitHub Enterprise
Google Chrome Security Advisories
Oracle Security Advisories
Adobe Security Advisories
OpenSSL Security Advisories
Microsoft
CVE
CWE
CPE
Latest Updates
OS ROSA
ALT Linux
Astra Linux
RED OS
DSA (Debian Security Advisory) Patсh Statistics
DSA (Debian Security Advisory) Patсh Feed
DSA (Debian Security Advisory) Vulnerability Feed
DLA (Debian Security Advisory) Patсh Statistics
DLA (Debian Security Advisory) Patсh Feed
DLA (Debian Security Advisory) Vulnerability Feed
ALT Linux (Security Bulletins) Patсh Statistics
ALT Linux (Security Bulletins) Patсh Feed
ALT Linux (Security Bulletins) Vulnerability Feed
RED OS (Security Bulletins) Patсh Statistics
RED OS (Security Bulletins) Patсh Feed
RED OS (Security Bulletins) Vulnerability Feed
USN (Ubuntu Security Notice) Patсh Statistics
USN (Ubuntu Security Notice) Patсh Feed
USN (Ubuntu Security Notice) Vulnerability Feed
RHSA (RedHat Security Advisory) Patсh Statistics
RHSA (RedHat Security Advisory) Patсh Feed
RHSA (RedHat Security Advisory) Vulnerability Feed
ELSA (Oracle Linux Security Advisory) Patсh Statistics
ELSA (Oracle Linux Security Advisory) Patсh Feed
ELSA (Oracle Linux Security Advisory) Vulnerability Feed
SUSE (SUSE Security Advisories) Patсh Statistics
SUSE (SUSE Security Advisories) Patсh Feed
SUSE (SUSE Security Advisories) Vulnerability Feed
openSUSE (openSUSE Security Advisories) Patсh Statistics
openSUSE (openSUSE Security Advisories) Patсh Feed
openSUSE (openSUSE Security Advisories) Vulnerability Feed
Amazon Linux AMI (Security Bulletins) Patсh Statistics
Amazon Linux AMI (Security Bulletins) Patсh Feed
Amazon Linux AMI (Security Bulletins) Vulnerability Feed
Mageia Linux (Security Bulletins) Patсh Statistics
Mageia Linux (Security Bulletins) Patсh Feed
Mageia Linux (Security Bulletins) Vulnerability Feed
OS ROSA SX COBALT 1.0
OS ROSA DX COBALT 1.0
ROSA 7.3 (Security Advisories) Patсh Statistics
ROSA 7.3 (Security Advisories) Patсh Feed
ROSA 7.3 (Security Advisories) Vulnerability Feed
ALT Linux SPT 6.0
ALT Linux SPT 7.0
ALT 8 SP
ALT 9
Astra Linux SE 1.5
Astra Linux SE 1.6
Astra Linux SE 1.7
Astra Linux SE 1.8
RED OS Murom 7.1
RED OS Murom 7.2
IBM DB2
VMware Vulnerabilities Advisory (VMSA)
VMware vCenter Patch Advisories
VMware ESXi Patch Advisories
VMware NSX Patches
VMware NSX Vulnerabilities
VMware Photon OS 1.0 Patches
VMware Photon OS 1.0 Vulnerabilities
VMware Photon OS 2.0 Patches
VMware Photon OS 2.0 Vulnerabilities
Cisco ASA
Cisco IOS/NX-OS Advisory
Cisco NX-OS Vulnerabilities
Check Point Gaia
Apache Tomcat Advisories
Apache Tomcat Server
Apache HTTP Server
Python
Node.js
RubyGems
Qt
Microsoft Security Bulletin
Microsoft Knowledge Base Article
Microsoft SharePoint
Microsoft SharePoint Foundation 2013
Microsoft SharePoint Server 2013
Microsoft SharePoint Server 2016
About OVALdb
User manual
Pricing
Contact us
OVAL Definitions
>
OVAL Definition Details
Id
oval:ru.altx-soft.nix:def:6242
[Eng]
Version
9
Class
patch
ALTXid
60364
Language
Russian
Severity
NotAvailable
Title
Обновление ELSA-2013-1645 : обновление ядра Oracle Linux 6
Description
[2.6.32-431]
- [md] Disabling of TRIM on RAID5 for RHEL6.5 was too aggressive (Jes Sorensen) [1028426]
Family
unix
Platform
Oracle Linux 6
Product
kernel
Reference
VENDOR: ELSA-2013-1645
VENDOR: ELSA-2013-1645
Id:
ELSA-2013-1645
Reference:
http://linux.oracle.com/errata/ELSA-2013-1645.html
CVE: CVE-2012-6542
CVE: CVE-2012-6542
Id:
CVE-2012-6542
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6542
Comment
: The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.
CVSSv2 Score:
1.9
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 (CONFIRM)
[oss-security] 20130305 CVE Requests (maybe): Linux kernel: various info leaks, some NULL ptr derefs (MLIST)
https://github.com/torvalds/linux/commit/3592aaeb80290bda0f2cf0b5456c97bfc638b192 (CONFIRM)
USN-1805-1 (UBUNTU)
USN-1808-1 (UBUNTU)
RHSA-2013:1645 (REDHAT)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3592aaeb80290bda0f2cf0b5456c97bfc638b192 ()
CVE: CVE-2013-1929
CVE: CVE-2013-1929
Id:
CVE-2013-1929
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1929
Comment
: Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.
CVSSv2 Score:
4.4
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
[oss-security] 20130405 Re: CVE Request: tg3 VPD firmware -> driver injection (MLIST)
http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=949932 (CONFIRM)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6 (CONFIRM)
https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424 (CONFIRM)
USN-1836-1 (UBUNTU)
USN-1834-1 (UBUNTU)
USN-1838-1 (UBUNTU)
USN-1835-1 (UBUNTU)
MDVSA-2013:176 (MANDRIVA)
SUSE-SU-2013:1473 (SUSE)
SUSE-SU-2013:1474 (SUSE)
FEDORA-2013-5368 (FEDORA)
openSUSE-SU-2013:1971 (SUSE)
RHSA-2013:1645 (REDHAT)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=715230a44310a8cf66fbfb5a46f9a62a9b2de424 (MISC)
CVE: CVE-2012-6545
CVE: CVE-2012-6545
Id:
CVE-2012-6545
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6545
Comment
: The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.
CVSSv2 Score:
1.9
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://github.com/torvalds/linux/commit/f9432c5ec8b1e9a09b9b0e5569e3c73db8de432a (CONFIRM)
[oss-security] 20130305 CVE Requests (maybe): Linux kernel: various info leaks, some NULL ptr derefs (MLIST)
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 (CONFIRM)
https://github.com/torvalds/linux/commit/9ad2de43f1aee7e7274a4e0d41465489299e344b (CONFIRM)
https://github.com/torvalds/linux/commit/9344a972961d1a6d2c04d9008b13617bcb6ec2ef (CONFIRM)
USN-1805-1 (UBUNTU)
USN-1808-1 (UBUNTU)
RHSA-2013:1645 (REDHAT)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9344a972961d1a6d2c04d9008b13617bcb6ec2ef ()
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ad2de43f1aee7e7274a4e0d41465489299e344b ()
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f9432c5ec8b1e9a09b9b0e5569e3c73db8de432a ()
CVE: CVE-2013-3231
CVE: CVE-2013-3231
Id:
CVE-2013-3231
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3231
Comment
: The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSSv2 Score:
4.7
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:C/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://github.com/torvalds/linux/commit/c77a4b9cffb6215a15196ec499490d116dfad181 (CONFIRM)
[linux-kernel] 20130414 Linux 3.9-rc7 (MLIST)
[oss-security] 20130414 Linux kernel: more net info leak fixes for v3.9 (MLIST)
USN-1837-1 (UBUNTU)
MDVSA-2013:176 (MANDRIVA)
openSUSE-SU-2013:1187 (SUSE)
FEDORA-2013-6537 (FEDORA)
FEDORA-2013-6999 (FEDORA)
openSUSE-SU-2013:1971 (SUSE)
RHSA-2013:1645 (REDHAT)
SUSE-SU-2013:1182 (SUSE)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c77a4b9cffb6215a15196ec499490d116dfad181 ()
CVE: CVE-2013-2164
CVE: CVE-2013-2164
Id:
CVE-2013-2164
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2164
Comment
: The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive.
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://bugzilla.redhat.com/show_bug.cgi?id=973100 (CONFIRM)
[oss-security] 20130610 Re: CVE Request: Linux Kernel - Leak information in cdrom driver. (MLIST)
http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2 (CONFIRM)
USN-1912-1 (UBUNTU)
USN-1913-1 (UBUNTU)
SUSE-SU-2013:1473 (SUSE)
SUSE-SU-2013:1474 (SUSE)
USN-1942-1 (UBUNTU)
USN-1941-1 (UBUNTU)
DSA-2766 (DEBIAN)
openSUSE-SU-2013:1971 (SUSE)
RHSA-2013:1645 (REDHAT)
RHSA-2013:1166 (REDHAT)
CVE: CVE-2013-2234
CVE: CVE-2013-2234
Id:
CVE-2013-2234
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2234
Comment
: The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
[oss-security] 20130702 Re: CVE Request: information leak in AF_KEY notify messages (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=980995 (CONFIRM)
https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 (CONFIRM)
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 (CONFIRM)
USN-1912-1 (UBUNTU)
USN-1913-1 (UBUNTU)
SUSE-SU-2013:1473 (SUSE)
SUSE-SU-2013:1474 (SUSE)
USN-1946-1 (UBUNTU)
USN-1945-1 (UBUNTU)
USN-1947-1 (UBUNTU)
USN-1944-1 (UBUNTU)
USN-1943-1 (UBUNTU)
USN-1941-1 (UBUNTU)
USN-1938-1 (UBUNTU)
USN-1942-1 (UBUNTU)
DSA-2766 (DEBIAN)
openSUSE-SU-2013:1971 (SUSE)
RHSA-2013:1645 (REDHAT)
RHSA-2013:1166 (REDHAT)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 (MISC)
CVE: CVE-2013-2851
CVE: CVE-2013-2851
Id:
CVE-2013-2851
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2851
Comment
: Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
CVSSv2 Score:
6
Access vector:
LOCAL
Access complexity:
HIGH
Authentication:
SINGLE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:H/Au:S/C:C/I:C/A:C
CWE:
134 (Uncontrolled Format String)
References:
RHSA-2013:1783 ()
[linux-kernel] 20130606 [PATCH 1/8] block: do not pass disk names as format strings ()
USN-1913-1 ()
SUSE-SU-2013:1473 ()
RHSA-2013:1645 ()
DSA-2766 ()
https://bugzilla.redhat.com/show_bug.cgi?id=969515 ()
openSUSE-SU-2013:1971 ()
SUSE-SU-2013:1474 ()
RHSA-2014:0284 ()
USN-1941-1 ()
[oss-security] 20130606 Linux kernel format string flaws ()
USN-1942-1 ()
USN-1912-1 ()
CVE: CVE-2013-0343
CVE: CVE-2013-0343
Id:
CVE-2013-0343
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0343
Comment
: The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.
CVSSv2 Score:
3.2
Access vector:
ADJACENT_NETWORK
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:A/AC:H/Au:N/C:P/I:N/A:P
References:
[oss-security] 20130116 Re: Linux kernel handling of IPv6 temporary addresses (MLIST)
[oss-security] 20121205 Re: Linux kernel handling of IPv6 temporary addresses (MLIST)
[oss-security] 20130222 Re: Linux kernel handling of IPv6 temporary addresses (MLIST)
[oss-security] 20130121 Re: Linux kernel handling of IPv6 temporary addresses (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=914664 (CONFIRM)
USN-1977-1 (UBUNTU)
USN-1976-1 (UBUNTU)
RHSA-2013:1449 (REDHAT)
RHSA-2013:1490 (REDHAT)
USN-2023-1 (UBUNTU)
USN-2050-1 (UBUNTU)
USN-2022-1 (UBUNTU)
USN-2019-1 (UBUNTU)
USN-2024-1 (UBUNTU)
RHSA-2013:1645 (REDHAT)
USN-2020-1 (UBUNTU)
USN-2038-1 (UBUNTU)
USN-2039-1 (UBUNTU)
USN-2021-1 (UBUNTU)
openSUSE-SU-2014:0204 (SUSE)
CVE: CVE-2013-4345
CVE: CVE-2013-4345
Id:
CVE-2013-4345
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345
Comment
: Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
CVSSv2 Score:
5.8
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE:
189 (Numeric Errors)
References:
[linux-crypto] 20130917 [PATCH] ansi_cprng: Fix off by one error in non-block size request (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=1007690 (CONFIRM)
RHSA-2013:1449 (REDHAT)
RHSA-2013:1490 (REDHAT)
RHSA-2013:1645 (REDHAT)
USN-2071-1 (UBUNTU)
USN-2075-1 (UBUNTU)
USN-2068-1 (UBUNTU)
USN-2070-1 (UBUNTU)
USN-2064-1 (UBUNTU)
USN-2076-1 (UBUNTU)
USN-2074-1 (UBUNTU)
USN-2072-1 (UBUNTU)
USN-2065-1 (UBUNTU)
USN-2110-1 (UBUNTU)
USN-2109-1 (UBUNTU)
USN-2158-1 (UBUNTU)
62740 (BID)
CVE: CVE-2013-1928
CVE: CVE-2013-1928
Id:
CVE-2013-1928
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1928
Comment
: The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.
CVSSv2 Score:
4.7
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:C/I:N/A:N
CWE:
200 (Information Exposure)
References:
[oss-security] 20130405 Re: CVE Request: kernel information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=949567 (CONFIRM)
[oss-security] 20130409 Re: CVE Request: kernel information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE (MLIST)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.5 (CONFIRM)
https://github.com/torvalds/linux/commit/12176503366885edd542389eed3aaf94be163fdb (CONFIRM)
USN-1829-1 (UBUNTU)
SUSE-SU-2013:0856 (SUSE)
openSUSE-SU-2013:0847 (SUSE)
RHSA-2013:1645 (REDHAT)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12176503366885edd542389eed3aaf94be163fdb (MISC)
CVE: CVE-2013-2888
CVE: CVE-2013-2888
Id:
CVE-2013-2888
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2888
Comment
: Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.
CVSSv2 Score:
6.2
Access vector:
LOCAL
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:H/Au:N/C:C/I:C/A:C
CWE:
20 (Improper Input Validation)
References:
USN-2024-1 ()
[linux-input] 20130828 [PATCH 01/14] HID: validate HID report id size ()
RHSA-2013:1490 ()
USN-1977-1 ()
USN-2039-1 ()
USN-2022-1 ()
[oss-security] 20130828 Linux HID security flaws ()
RHSA-2013:1645 ()
USN-1995-1 ()
USN-2038-1 ()
DSA-2766 ()
USN-2021-1 ()
USN-1976-1 ()
USN-2019-1 ()
USN-1998-1 ()
USN-2050-1 ()
CVE: CVE-2013-2889
CVE: CVE-2013-2889
Id:
CVE-2013-2889
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2889
Comment
: drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
CVSSv2 Score:
4.7
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:N/I:N/A:C
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
USN-2015-1 ()
USN-2024-1 ()
USN-2039-1 ()
USN-2022-1 ()
[oss-security] 20130828 Linux HID security flaws ()
RHSA-2013:1645 ()
USN-2016-1 ()
USN-2038-1 ()
USN-2020-1 ()
USN-2021-1 ()
USN-2019-1 ()
62042 ()
[linux-input] 20130828 [PATCH 03/14] HID: zeroplus: validate output report details ()
USN-2023-1 ()
USN-2050-1 ()
CVE: CVE-2013-2892
CVE: CVE-2013-2892
Id:
CVE-2013-2892
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2892
Comment
: drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
CVSSv2 Score:
4.7
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:N/I:N/A:C
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
USN-2024-1 ()
RHSA-2013:1490 ()
USN-1977-1 ()
USN-2039-1 ()
USN-2022-1 ()
[oss-security] 20130828 Linux HID security flaws ()
RHSA-2013:1645 ()
USN-1995-1 ()
USN-2038-1 ()
DSA-2766 ()
USN-2021-1 ()
USN-1976-1 ()
USN-2019-1 ()
62049 ()
USN-1998-1 ()
[linux-input] 20130828 [PATCH 06/14] HID: pantherlord: validate output report details ()
USN-2050-1 ()
CVE: CVE-2013-4387
CVE: CVE-2013-4387
Id:
CVE-2013-4387
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4387
Comment
: net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
CVSSv2 Score:
6.1
Access vector:
ADJACENT_NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 (CONFIRM)
[oss-security] 20130928 Re: linux kernel memory corruption with ipv6 udp offloading (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=1011927 (CONFIRM)
USN-2041-1 (UBUNTU)
USN-2045-1 (UBUNTU)
USN-2049-1 (UBUNTU)
RHSA-2013:1490 (REDHAT)
USN-2050-1 (UBUNTU)
USN-2019-1 (UBUNTU)
USN-2022-1 (UBUNTU)
USN-2024-1 (UBUNTU)
RHSA-2013:1645 (REDHAT)
USN-2039-1 (UBUNTU)
USN-2038-1 (UBUNTU)
USN-2021-1 (UBUNTU)
RHSA-2014:0284 (REDHAT)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47 (MISC)
CVE: CVE-2013-4591
CVE: CVE-2013-4591
Id:
CVE-2013-4591
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4591
Comment
: Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.
CVSSv2 Score:
6.2
Access vector:
LOCAL
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:H/Au:N/C:C/I:C/A:C
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af (CONFIRM)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 (CONFIRM)
[oss-security] 20131118 CVE-2013-4591 -- Linux kernel: kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=1031678 (CONFIRM)
RHSA-2013:1645 (REDHAT)
RHSA-2014:0284 (REDHAT)
63791 (BID)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d3e91a89b7adbc2831334def9e494dd9892f9af (MISC)
CVE: CVE-2013-4592
CVE: CVE-2013-4592
Id:
CVE-2013-4592
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592
Comment
: Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.
CVSSv2 Score:
4
Access vector:
LOCAL
Access complexity:
HIGH
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:H/Au:N/C:N/I:N/A:C
CWE:
399 (Resource Management Errors)
References:
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.9.bz2 (CONFIRM)
https://bugzilla.redhat.com/show_bug.cgi?id=1031702 (CONFIRM)
[oss-security] 20131118 CVE-2013-4592 -- Linux kernel: kvm: memory leak when memory slot is moved with assigned device (MLIST)
https://github.com/torvalds/linux/commit/e40f193f5bb022e927a57a4f5d5194e4f12ddb74 (CONFIRM)
https://github.com/torvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 (CONFIRM)
RHSA-2013:1645 (REDHAT)
USN-2066-1 (UBUNTU)
USN-2067-1 (UBUNTU)
USN-2114-1 (UBUNTU)
openSUSE-SU-2014:0247 (SUSE)
USN-2111-1 (UBUNTU)
USN-2116-1 (UBUNTU)
USN-2112-1 (UBUNTU)
USN-2115-1 (UBUNTU)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 (MISC)
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40f193f5bb022e927a57a4f5d5194e4f12ddb74 (MISC)
Content available only for registered users!
ovaldb@altx-soft.com