Test Kennung:	1.3.6.1.4.1.25623.1.0.123732
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2013-2504)
Zusammenfassung:	The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.39.4.el5uek, mlnx_en-2.6.32-300.39.4.el6uek, ofa-2.6.32-300.39.4.el5uek, ofa-2.6.32-300.39.4.el6uek' package(s) announced via the ELSA-2013-2504 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.39.4.el5uek, mlnx_en-2.6.32-300.39.4.el6uek, ofa-2.6.32-300.39.4.el5uek, ofa-2.6.32-300.39.4.el6uek' package(s) announced via the ELSA-2013-2504 advisory. Vulnerability Insight: [2.6.32-300.39.4] - exec: do not leave bprm->interp on stack (Kees Cook) [Orabug: 16286741] {CVE-2012-4530} - exec: use -ELOOP for max recursion depth (Kees Cook) [Orabug: 16286741] {CVE-2012-4530} [2.6.32-300.39.3] - Xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests. (Frediano Ziglio) [Orabug: 16274192] {CVE-2013-0190} Affected Software/OS: 'kernel-uek, mlnx_en-2.6.32-300.39.4.el5uek, mlnx_en-2.6.32-300.39.4.el6uek, ofa-2.6.32-300.39.4.el5uek, ofa-2.6.32-300.39.4.el6uek' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4530 RHSA-2013:0223 http://rhn.redhat.com/errata/RHSA-2013-0223.html SUSE-SU-2013:0674 http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html [oss-security] 20121019 Re: CVE Request -- kernel stack disclosure in binfmt_script load_script() http://www.openwall.com/lists/oss-security/2012/10/19/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b66c5984017533316fd1951770302649baf1aa33 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 https://bugzilla.redhat.com/show_bug.cgi?id=868285 https://github.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33 Common Vulnerability Exposure (CVE) ID: CVE-2013-0190 57433 http://www.securityfocus.com/bid/57433 RHSA-2013:0496 http://rhn.redhat.com/errata/RHSA-2013-0496.html USN-1725-1 http://www.ubuntu.com/usn/USN-1725-1 USN-1728-1 http://www.ubuntu.com/usn/USN-1728-1 [oss-security] 20130116 Xen Security Advisory 40 (CVE-2013-0190) - Linux stack corruption in xen_failsafe_callback for 32bit PVOPS guests. http://www.openwall.com/lists/oss-security/2013/01/16/8 [oss-security] 20130116 [PATCH] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests. http://www.openwall.com/lists/oss-security/2013/01/16/6 https://bugzilla.redhat.com/show_bug.cgi?id=896038
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.