Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.60332
Category:Fedora Local Security Checks
Title:Fedora Core 7 FEDORA-2008-1422 (kernel)
Summary:NOSUMMARY
Description:Description:

The remote host is missing an update to kernel
announced via advisory FEDORA-2008-1422.

Update Information:

Update to Linux kernel 2.6.23.15:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.15
Fix vmsplice local root vulnerability: CVE-2008-0009: Fixed by update to 2.6.23.15.
CVE-2008-0010: Fixed by update to 2.6.23.15.
CVE-2008-0600: Extra fix from upstream applied.
Fix memory leak in netlabel code (#352281)
Autoload the Dell dcdbas driver like in F8 (#326041)
Work around broken Seagate LBA48 disks. (F8#429364)
Fix futex oops on uniprocessor machine. (F8#429412)
Add support for new Macbook touchpads. (F8#426574)
Fix the initio driver broken in 2.6.23. (F8#390531)
Fix segfaults from using vdso=2. (F8#427641)
FireWire updates, fixing multiple problems.
ACPI: fix multiple problems with brightness controls (F8#427518)
Wireless driver updates from upstream.

ChangeLog:

References:

[ 1 ] Bug #352281 - Kernel memory leak with lots of threads?
https://bugzilla.redhat.com/show_bug.cgi?id=352281
[ 2 ] Bug #326041 - Messages appear in /var/log/messages every few seconds
kernel module not loaded
https://bugzilla.redhat.com/show_bug.cgi?id=326041
[ 3 ] Bug #432283 - [SECURITY] CVE-2008-0600 local escalation of privilege
https://bugzilla.redhat.com/show_bug.cgi?id=432283

Solution: Apply the appropriate updates.

This update can be installed with the yum update program. Use
su -c 'yum update kernel' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.

https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2008-1422

Risk factor : High

CVSS Score:
7.2

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2008-0009
20080212 CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference
http://www.securityfocus.com/archive/1/487982/100/0/threaded
27704
http://www.securityfocus.com/bid/27704
27799
http://www.securityfocus.com/bid/27799
28835
http://secunia.com/advisories/28835
28896
http://secunia.com/advisories/28896
ADV-2008-0487
http://www.vupen.com/english/advisories/2008/0487/references
FEDORA-2008-1422
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html
FEDORA-2008-1423
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html
http://isec.pl/vulnerabilities/isec-0026-vmsplice_to_kernel.txt
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.1
https://bugzilla.redhat.com/show_bug.cgi?id=431206
Common Vulnerability Exposure (CVE) ID: CVE-2008-0010
27796
http://www.securityfocus.com/bid/27796
28875
http://secunia.com/advisories/28875
5093
https://www.exploit-db.com/exploits/5093
DSA-1494
http://www.debian.org/security/2008/dsa-1494
Common Vulnerability Exposure (CVE) ID: CVE-2008-0600
1019393
http://securitytracker.com/id?1019393
20080212 rPSA-2008-0052-1 kernel
http://www.securityfocus.com/archive/1/488009/100/0/threaded
27801
http://www.securityfocus.com/bid/27801
28858
http://secunia.com/advisories/28858
28889
http://secunia.com/advisories/28889
28912
http://secunia.com/advisories/28912
28925
http://secunia.com/advisories/28925
28933
http://secunia.com/advisories/28933
28937
http://secunia.com/advisories/28937
29245
http://secunia.com/advisories/29245
30818
http://secunia.com/advisories/30818
5092
https://www.exploit-db.com/exploits/5092
FEDORA-2008-1433
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00270.html
FEDORA-2008-1629
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00485.html
MDVSA-2008:043
http://www.mandriva.com/security/advisories?name=MDVSA-2008:043
MDVSA-2008:044
http://www.mandriva.com/security/advisories?name=MDVSA-2008:044
RHSA-2008:0129
http://www.redhat.com/support/errata/RHSA-2008-0129.html
SUSE-SA:2008:007
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html
SUSE-SA:2008:013
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html
SUSE-SA:2008:030
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
USN-577-1
http://www.ubuntu.com/usn/usn-577-1
[linux-kernel] 20080210 Re: [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit
http://marc.info/?l=linux-kernel&m=120263652322197&w=2
http://marc.info/?l=linux-kernel&m=120264520431307&w=2
http://marc.info/?l=linux-kernel&m=120264773202422&w=2
http://marc.info/?l=linux-kernel&m=120266328220808&w=2
http://marc.info/?l=linux-kernel&m=120266353621139&w=2
http://wiki.rpath.com/Advisories:rPSA-2008-0052
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0052
https://bugzilla.redhat.com/show_bug.cgi?id=432229
https://bugzilla.redhat.com/show_bug.cgi?id=432517
https://issues.rpath.com/browse/RPL-2237
oval:org.mitre.oval:def:11358
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11358
Common Vulnerability Exposure (CVE) ID: CVE-2007-5938
BugTraq ID: 26842
http://www.securityfocus.com/bid/26842
http://article.gmane.org/gmane.linux.drivers.ipw3945.devel/1618
http://osvdb.org/44749
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10787
http://www.redhat.com/support/errata/RHSA-2008-0154.html
http://secunia.com/advisories/29236
http://www.vupen.com/english/advisories/2007/4211
CopyrightCopyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.