ID de Prueba:	1.3.6.1.4.1.25623.1.0.123732
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2013-2504)
Resumen:	The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.39.4.el5uek, mlnx_en-2.6.32-300.39.4.el6uek, ofa-2.6.32-300.39.4.el5uek, ofa-2.6.32-300.39.4.el6uek' package(s) announced via the ELSA-2013-2504 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel-uek, mlnx_en-2.6.32-300.39.4.el5uek, mlnx_en-2.6.32-300.39.4.el6uek, ofa-2.6.32-300.39.4.el5uek, ofa-2.6.32-300.39.4.el6uek' package(s) announced via the ELSA-2013-2504 advisory. Vulnerability Insight: [2.6.32-300.39.4] - exec: do not leave bprm->interp on stack (Kees Cook) [Orabug: 16286741] {CVE-2012-4530} - exec: use -ELOOP for max recursion depth (Kees Cook) [Orabug: 16286741] {CVE-2012-4530} [2.6.32-300.39.3] - Xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests. (Frediano Ziglio) [Orabug: 16274192] {CVE-2013-0190} Affected Software/OS: 'kernel-uek, mlnx_en-2.6.32-300.39.4.el5uek, mlnx_en-2.6.32-300.39.4.el6uek, ofa-2.6.32-300.39.4.el5uek, ofa-2.6.32-300.39.4.el6uek' package(s) on Oracle Linux 5, Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4530 RHSA-2013:0223 http://rhn.redhat.com/errata/RHSA-2013-0223.html SUSE-SU-2013:0674 http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html [oss-security] 20121019 Re: CVE Request -- kernel stack disclosure in binfmt_script load_script() http://www.openwall.com/lists/oss-security/2012/10/19/3 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b66c5984017533316fd1951770302649baf1aa33 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 https://bugzilla.redhat.com/show_bug.cgi?id=868285 https://github.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33 Common Vulnerability Exposure (CVE) ID: CVE-2013-0190 57433 http://www.securityfocus.com/bid/57433 RHSA-2013:0496 http://rhn.redhat.com/errata/RHSA-2013-0496.html USN-1725-1 http://www.ubuntu.com/usn/USN-1725-1 USN-1728-1 http://www.ubuntu.com/usn/USN-1728-1 [oss-security] 20130116 Xen Security Advisory 40 (CVE-2013-0190) - Linux stack corruption in xen_failsafe_callback for 32bit PVOPS guests. http://www.openwall.com/lists/oss-security/2013/01/16/8 [oss-security] 20130116 [PATCH] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests. http://www.openwall.com/lists/oss-security/2013/01/16/6 https://bugzilla.redhat.com/show_bug.cgi?id=896038
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.