Test Kennung:	1.3.6.1.4.1.25623.1.0.123768
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2012-2047)
Zusammenfassung:	The remote host is missing an update for the 'kernel-uek' package(s) announced via the ELSA-2012-2047 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'kernel-uek' package(s) announced via the ELSA-2012-2047 advisory. Vulnerability Insight: [2.6.39-300.17.3] - mm/hotplug: correctly add new zone to all other nodes zone lists (Jiang Liu) [Orabug: 16020976 Bug-db: 14798] {CVE-2012-5517} - Divide by zero in TCP congestion control Algorithm. (Jesper Dangaard Brouer) [Orabug: 16020656 Bug-db: 14798] {CVE-2012-4565} - Fix length of buffer copied in __nfs4_get_acl_uncached (Sachin Prabhu) [Bug- db: 14798] {CVE-2012-2375} - Avoid reading past buffer when calling GETACL (Sachin Prabhu) [Bug-db: 14798] {CVE-2012-2375} - Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [Bug-db: 14798] {CVE-2012-2375} Affected Software/OS: 'kernel-uek' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 4.7 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2375 HPSBGN02970 http://marc.info/?l=bugtraq&m=139447903326211&w=2 RHSA-2012:1580 http://rhn.redhat.com/errata/RHSA-2012-1580.html [oss-security] 20120518 Re: CVE Request -- kernel: incomplete fix for CVE-2011-4131 http://www.openwall.com/lists/oss-security/2012/05/18/13 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=20e0fa98b751facf9a1101edaefbc19c82616a68 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2 https://bugzilla.redhat.com/show_bug.cgi?id=822869 https://github.com/torvalds/linux/commit/20e0fa98b751facf9a1101edaefbc19c82616a68 Common Vulnerability Exposure (CVE) ID: CVE-2012-4565 51409 http://secunia.com/advisories/51409 56346 http://www.securityfocus.com/bid/56346 FEDORA-2012-17479 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html USN-1644-1 http://www.ubuntu.com/usn/USN-1644-1 USN-1645-1 http://www.ubuntu.com/usn/USN-1645-1 USN-1646-1 http://www.ubuntu.com/usn/USN-1646-1 USN-1647-1 http://www.ubuntu.com/usn/USN-1647-1 USN-1648-1 http://www.ubuntu.com/usn/USN-1648-1 USN-1649-1 http://www.ubuntu.com/usn/USN-1649-1 USN-1650-1 http://www.ubuntu.com/usn/USN-1650-1 USN-1651-1 http://www.ubuntu.com/usn/USN-1651-1 USN-1652-1 http://www.ubuntu.com/usn/USN-1652-1 [oss-security] 20121031 Re: CVE Request -- kernel: net: divide by zero in tcp algorithm illinois http://www.openwall.com/lists/oss-security/2012/10/31/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8f363b77ee4fbf7c3bbcf5ec2c5ca482d396d664 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.19 https://bugzilla.redhat.com/show_bug.cgi?id=871848 https://github.com/torvalds/linux/commit/8f363b77ee4fbf7c3bbcf5ec2c5ca482d396d664 Common Vulnerability Exposure (CVE) ID: CVE-2012-5517 56527 http://www.securityfocus.com/bid/56527 SUSE-SU-2012:1679 https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html USN-1671-1 http://www.ubuntu.com/usn/USN-1671-1 USN-1673-1 http://www.ubuntu.com/usn/USN-1673-1 USN-1677-1 http://www.ubuntu.com/usn/USN-1677-1 USN-1678-1 http://www.ubuntu.com/usn/USN-1678-1 USN-1679-1 http://www.ubuntu.com/usn/USN-1679-1 [oss-security] 20121113 Re: CVE request -- Linux kernel: mm/hotplug: failure in propagating hot-added memory to other nodes http://www.openwall.com/lists/oss-security/2012/11/13/11 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=08dff7b7d629807dbb1f398c68dd9cd58dd657a1 http://www.kernel.org/pub/linux/kernel/v3.x/ http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 https://bugzilla.redhat.com/show_bug.cgi?id=875374 https://github.com/torvalds/linux/commit/08dff7b7d629807dbb1f398c68dd9cd58dd657a1 openSUSE-SU-2013:0925 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.