ID de Prueba:	1.3.6.1.4.1.25623.1.0.122281
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2011-0017)
Resumen:	The remote host is missing an update for the 'kernel, ocfs2-2.6.18-238.el5, oracleasm-2.6.18-238.el5' package(s) announced via the ELSA-2011-0017 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel, ocfs2-2.6.18-238.el5, oracleasm-2.6.18-238.el5' package(s) announced via the ELSA-2011-0017 advisory. Vulnerability Insight: [2.6.18-238.el5] - [net] bnx2: remove extra call to pci_map_page (John Feeney) [663509] - [fs] nfs: set lock_context field in nfs_readpage_sync (Jeff Layton) [663853] [2.6.18-237.el5] - [block] fully zeroize request struct in rq_init (Rob Evers) [662154] - [scsi] qla4xxx: update to 5.02.04.02.05.06-d0 (Chad Dupuis) [656999] - [scsi] qla4xxx: make get_sys_info function return void (Chad Dupuis) [656999] - [scsi] qla4xxx: don't default device to FAILED state (Chad Dupuis) [656999] - [scsi] qla4xxx: mask bits in F/W Options during init (Chad Dupuis) [656999] - [scsi] qla4xxx: update to 5.02.04.01.05.06-d0 (Chad Dupuis) [661768] - [scsi] qla4xxx: disable irq instead of req pci_slot_reset (Chad Dupuis) [661768] - [scsi] qla4xxx: no device add until scsi_add_host success (Chad Dupuis) [661768] - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [660580] - [scsi] bfa: fix crash reading driver sysfs statistics (Rob Evers) [659880] {CVE-2010-4343} - [misc] cpufeature: avoid corrupting cpuid vendor id (Matthew Garrett) [568751] - [char] drm: don't set signal blocker on master process (Dave Airlie) [570604] - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [656492] - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [656492] - [fs] nfs: clean up nfs_create_request (Jeff Layton) [656492] - [net] forcedeth: fix race condition in latest backport (Ivan Vecera) [658434] - [net] cxgb3: fix read of uninitialized stack memory (Jay Fenlason) [633155] {CVE-2010-3296} - [net] tg3: increase jumbo flag threshold (John Feeney) [660506] - [net] s2io: fix netdev initialization failure (Bob Picco) [654948] - [net] igb: only use vlan_gro_receive if vlans registered (Stefan Assmann) [660190] {CVE-2010-4263} - [net] ipv6: try all routers with unknown reachable state (Thomas Graf) [661393] - [misc] kernel: fix address limit override in OOPS path (Dave Anderson) [659571] {CVE-2010-4258} [2.6.18-236.el5] - [powerpc] support DLPAR remove operations (Steve Best) [655089] - [net] igb: fix tx packet count (Stefan Assmann) [658801] - [usb] serial: new driver MosChip MCS7840 (Stefan Assmann) [574507] - [fs] exec: copy fixes into compat_do_execve paths (Oleg Nesterov) [625694] {CVE-2010-4243} - [fs] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [625694] {CVE-2010-4243} - [misc] binfmts: kill bprm->argv_len (Oleg Nesterov) [625694] {CVE-2010-4243} - [mm] backport upstream stack guard page /proc reporting (Larry Woodman) [643426] - [mm] add guard page for stacks that grow upwards (Johannes Weiner) [630563] - [net] tipc: fix information leak to userland (Jiri Pirko) [649892] {CVE-2010-3877} - [sound] ALSA: fix sysfs unload and OSS mixer mutex issues (Jaroslav Kysela) [652165] - [net] tg3: fix 5719 bugs (John Feeney) [657097] - [net] bnx2: update firmware to 6.0.x (John Feeney) [644438] - [redhat] configs: add ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'kernel, ocfs2-2.6.18-238.el5, oracleasm-2.6.18-238.el5' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 7.9 CVSS Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3296 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console http://www.securityfocus.com/archive/1/520102/100/0/threaded 41440 http://secunia.com/advisories/41440 42758 http://secunia.com/advisories/42758 42884 http://secunia.com/advisories/42884 43221 http://www.securityfocus.com/bid/43221 46397 http://secunia.com/advisories/46397 ADV-2011-0070 http://www.vupen.com/english/advisories/2011/0070 ADV-2011-0298 http://www.vupen.com/english/advisories/2011/0298 DSA-2126 http://www.debian.org/security/2010/dsa-2126 RHSA-2011:0017 http://www.redhat.com/support/errata/RHSA-2011-0017.html SUSE-SA:2010:050 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html SUSE-SA:2010:054 http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html SUSE-SA:2011:007 http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html USN-1041-1 http://www.ubuntu.com/usn/USN-1041-1 [linux-kernel] 20100911 [PATCH] drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory http://lkml.org/lkml/2010/9/11/170 [oss-security] 20100914 CVE request: kernel: numerous infoleaks http://www.openwall.com/lists/oss-security/2010/09/14/2 [oss-security] 20100914 Re: CVE request: kernel: numerous infoleaks http://www.openwall.com/lists/oss-security/2010/09/14/7 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=49c37c0334a9b85d30ab3d6b5d1acb05ef2ef6de http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc5 http://www.vmware.com/security/advisories/VMSA-2011-0012.html https://bugzilla.redhat.com/show_bug.cgi?id=633149 Common Vulnerability Exposure (CVE) ID: CVE-2010-3877 44630 http://www.securityfocus.com/bid/44630 MDVSA-2011:029 http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 [netdev] 20101031 [PATCH 3/3] net: tipc: fix information leak to userland http://marc.info/?l=linux-netdev&m=128854507420917&w=2 [oss-security] 20101102 CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/02/7 [oss-security] 20101104 Re: CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/04/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88f8a5e3e7defccd3925cabb1ee4d3994e5cdb52 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 https://bugzilla.redhat.com/show_bug.cgi?id=649717 kernel-getname-info-disc(64578) https://exchange.xforce.ibmcloud.com/vulnerabilities/64578 Common Vulnerability Exposure (CVE) ID: CVE-2010-4072 BugTraq ID: 45054 http://www.securityfocus.com/bid/45054 Bugtraq: 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console (Google Search) Debian Security Information: DSA-2126 (Google Search) http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 http://lkml.org/lkml/2010/10/6/454 http://www.openwall.com/lists/oss-security/2010/10/07/1 http://www.openwall.com/lists/oss-security/2010/10/25/3 http://www.redhat.com/support/errata/RHSA-2010-0958.html http://www.redhat.com/support/errata/RHSA-2011-0007.html http://www.redhat.com/support/errata/RHSA-2011-0162.html http://secunia.com/advisories/42778 http://secunia.com/advisories/42890 http://secunia.com/advisories/42932 http://secunia.com/advisories/42963 http://secunia.com/advisories/43161 http://secunia.com/advisories/43291 SuSE Security Announcement: SUSE-SA:2010:060 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html SuSE Security Announcement: SUSE-SA:2011:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html SuSE Security Announcement: SUSE-SA:2011:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html SuSE Security Announcement: SUSE-SA:2011:007 (Google Search) SuSE Security Announcement: SUSE-SA:2011:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html http://www.ubuntu.com/usn/USN-1057-1 http://www.vupen.com/english/advisories/2011/0012 http://www.vupen.com/english/advisories/2011/0124 http://www.vupen.com/english/advisories/2011/0168 http://www.vupen.com/english/advisories/2011/0280 http://www.vupen.com/english/advisories/2011/0375 Common Vulnerability Exposure (CVE) ID: CVE-2010-4073 BugTraq ID: 45073 http://www.securityfocus.com/bid/45073 http://lkml.org/lkml/2010/10/6/492 http://securityreason.com/securityalert/8366 Common Vulnerability Exposure (CVE) ID: CVE-2010-4075 BugTraq ID: 43806 http://www.securityfocus.com/bid/43806 http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03388.html http://www.openwall.com/lists/oss-security/2010/09/25/2 http://www.openwall.com/lists/oss-security/2010/10/06/6 Common Vulnerability Exposure (CVE) ID: CVE-2010-4080 BugTraq ID: 45058 http://www.securityfocus.com/bid/45058 BugTraq ID: 45063 http://www.securityfocus.com/bid/45063 http://lkml.org/lkml/2010/9/25/41 http://secunia.com/advisories/42801 SuSE Security Announcement: SUSE-SA:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4081 Common Vulnerability Exposure (CVE) ID: CVE-2010-4158 20101109 Kernel 0-day http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077321.html http://www.securityfocus.com/archive/1/514705 20101118 Re: Kernel 0-day http://www.securityfocus.com/archive/1/514845 42745 http://secunia.com/advisories/42745 42778 42801 42890 42932 42963 43291 44758 http://www.securityfocus.com/bid/44758 ADV-2010-3321 http://www.vupen.com/english/advisories/2010/3321 ADV-2011-0012 ADV-2011-0124 ADV-2011-0168 ADV-2011-0375 FEDORA-2010-18983 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html RHSA-2010:0958 RHSA-2011:0007 RHSA-2011:0162 SUSE-SA:2010:060 SUSE-SA:2011:001 SUSE-SA:2011:002 SUSE-SA:2011:004 SUSE-SA:2011:008 [netdev] 20101109 [PATCH] Prevent reading uninitialized memory with socket filters http://www.spinics.net/lists/netdev/msg146361.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=57fe93b374a6b8711995c2d466c502af9f3a08bb http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 https://bugzilla.redhat.com/show_bug.cgi?id=651698 Common Vulnerability Exposure (CVE) ID: CVE-2010-4238 45795 http://www.securityfocus.com/bid/45795 http://bugs.centos.org/bug_view_advanced_page.php?bug_id=4517 https://bugzilla.redhat.com/show_bug.cgi?id=655623 xen-vdbcreate-dos(64698) https://exchange.xforce.ibmcloud.com/vulnerabilities/64698 Common Vulnerability Exposure (CVE) ID: CVE-2010-4243 15619 http://www.exploit-db.com/exploits/15619 45004 http://www.securityfocus.com/bid/45004 [linux-kernel] 20100827 [PATCH] exec argument expansion can inappropriately trigger OOM-killer http://lkml.org/lkml/2010/8/27/429 [linux-kernel] 20100830 Re: [PATCH] exec argument expansion can inappropriately trigger OOM-killer http://lkml.org/lkml/2010/8/29/206 http://lkml.org/lkml/2010/8/30/138 http://lkml.org/lkml/2010/8/30/378 [linux-kernel] 20101130 [PATCH 1/2] exec: make argv/envp memory visible to oom-killer http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html [oss-security] 20101122 CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads http://openwall.com/lists/oss-security/2010/11/22/6 [oss-security] 20101122 Re: CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads http://openwall.com/lists/oss-security/2010/11/22/15 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c http://grsecurity.net/~spender/64bit_dos.c http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 https://bugzilla.redhat.com/show_bug.cgi?id=625688 linux-kernel-execve-dos(64700) https://exchange.xforce.ibmcloud.com/vulnerabilities/64700 Common Vulnerability Exposure (CVE) ID: CVE-2010-4255 [oss-security] 20101130 CVE request: xen: x86-64: don't crash Xen upon direct pv guest access http://openwall.com/lists/oss-security/2010/11/30/5 [oss-security] 20101130 Re: CVE request: xen: x86-64: don't crash Xen upon direct pv guest access http://openwall.com/lists/oss-security/2010/11/30/8 [xen-devel] 20101129 [PATCH] x86-64: don't crash Xen upon direct pv guest access http://lists.xensource.com/archives/html/xen-devel/2010-11/msg01650.html https://bugzilla.redhat.com/show_bug.cgi?id=658155 Common Vulnerability Exposure (CVE) ID: CVE-2010-4263 45208 http://www.securityfocus.com/bid/45208 [oss-security] 20101206 CVE request: kernel: igb panics when receiving tag vlan packet http://openwall.com/lists/oss-security/2010/12/06/3 [oss-security] 20101206 Re: CVE request: kernel: igb panics when receiving tag vlan packet http://openwall.com/lists/oss-security/2010/12/06/9 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=31b24b955c3ebbb6f3008a6374e61cf7c05a193c http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 https://bugzilla.kernel.org/show_bug.cgi?id=15582 https://bugzilla.redhat.com/show_bug.cgi?id=660188 Common Vulnerability Exposure (CVE) ID: CVE-2010-4343 45262 http://www.securityfocus.com/bid/45262 [linux-scsi] 20100521 [PATCH 1/2] bfa: fix system crash when reading sysfs fc_host statistics http://www.spinics.net/lists/linux-scsi/msg43772.html [oss-security] 20101208 CVE request: kernel: bfa driver sysfs crash http://www.openwall.com/lists/oss-security/2010/12/08/3 [oss-security] 20101209 Re: CVE request: kernel: bfa driver sysfs crash http://www.openwall.com/lists/oss-security/2010/12/09/15 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7873ca4e4401f0ecd8868bf1543113467e6bae61 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 https://bugzilla.redhat.com/show_bug.cgi?id=661182
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.