Test ID:	1.3.6.1.4.1.25623.1.0.62164
Category:	CentOS Local Security Checks
Title:	CentOS Security Advisory CESA-2007:0939 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates to kernel announced in advisory CESA-2007:0939. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. https://secure1.securityspace.com/smysecure/catid.html?in=CESA-2007:0939 https://secure1.securityspace.com/smysecure/catid.html?in=RHSA-2007:0939 https://rhn.redhat.com/errata/RHSA-2007-0939.html Risk factor : Medium CVSS Score: 4.9
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6921 http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/0980.html http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/1021.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10834 http://www.redhat.com/support/errata/RHSA-2007-0939.html http://www.redhat.com/support/errata/RHSA-2008-0154.html http://secunia.com/advisories/27436 http://secunia.com/advisories/27747 http://secunia.com/advisories/29236 Common Vulnerability Exposure (CVE) ID: CVE-2007-2878 BugTraq ID: 24134 http://www.securityfocus.com/bid/24134 Debian Security Information: DSA-1479 (Google Search) http://www.debian.org/security/2008/dsa-1479 http://osvdb.org/35926 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11674 http://www.redhat.com/support/errata/RHSA-2007-0705.html http://secunia.com/advisories/25505 http://secunia.com/advisories/26133 http://secunia.com/advisories/26139 http://secunia.com/advisories/26760 http://secunia.com/advisories/28626 http://www.ubuntu.com/usn/usn-486-1 http://www.ubuntu.com/usn/usn-489-1 http://www.ubuntu.com/usn/usn-510-1 http://www.vupen.com/english/advisories/2007/2023 XForce ISS Database: kernel-vfatioctls-dos(34669) https://exchange.xforce.ibmcloud.com/vulnerabilities/34669 Common Vulnerability Exposure (CVE) ID: CVE-2007-3105 25348 http://www.securityfocus.com/bid/25348 26500 http://secunia.com/advisories/26500 26643 http://secunia.com/advisories/26643 26647 http://secunia.com/advisories/26647 26651 http://secunia.com/advisories/26651 26664 http://secunia.com/advisories/26664 27212 http://secunia.com/advisories/27212 27227 http://secunia.com/advisories/27227 27322 http://secunia.com/advisories/27322 27436 27747 29058 http://secunia.com/advisories/29058 DSA-1363 http://www.debian.org/security/2007/dsa-1363 DSA-1504 http://www.debian.org/security/2008/dsa-1504 MDKSA-2007:195 http://www.mandriva.com/security/advisories?name=MDKSA-2007:195 MDKSA-2007:196 http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 MDKSA-2007:216 http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 RHSA-2007:0939 RHSA-2007:0940 http://www.redhat.com/support/errata/RHSA-2007-0940.html SUSE-SA:2007:051 http://www.novell.com/linux/security/advisories/2007_51_kernel.html SUSE-SA:2007:053 http://www.novell.com/linux/security/advisories/2007_53_kernel.html USN-508-1 http://www.ubuntu.com/usn/usn-508-1 USN-509-1 http://www.ubuntu.com/usn/usn-509-1 USN-510-1 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.22-git14.log https://issues.rpath.com/browse/RPL-1650 oval:org.mitre.oval:def:10371 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10371 Common Vulnerability Exposure (CVE) ID: CVE-2007-3739 23955 http://secunia.com/advisories/23955 26760 26955 http://secunia.com/advisories/26955 26978 http://secunia.com/advisories/26978 27913 http://secunia.com/advisories/27913 DSA-1378 http://www.debian.org/security/2007/dsa-1378 RHSA-2007:0705 RHSA-2007:1049 http://www.redhat.com/support/errata/RHSA-2007-1049.html USN-518-1 http://www.ubuntu.com/usn/usn-518-1 [lkml] 20070129 [PATCH] Don't allow the stack to grow into hugetlb reserved regions http://lkml.org/lkml/2007/1/29/180 https://bugzilla.redhat.com/show_bug.cgi?id=253313 kernel-stack-expansion-dos(36592) https://exchange.xforce.ibmcloud.com/vulnerabilities/36592 oval:org.mitre.oval:def:11455 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11455 Common Vulnerability Exposure (CVE) ID: CVE-2007-3740 25672 http://www.securityfocus.com/bid/25672 27912 http://secunia.com/advisories/27912 28806 http://secunia.com/advisories/28806 MDVSA-2008:008 http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 MDVSA-2008:105 http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 SUSE-SA:2007:064 http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html SUSE-SA:2008:006 http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 https://bugzilla.redhat.com/show_bug.cgi?id=253314 kernel-cifs-filesystem-dos(36593) https://exchange.xforce.ibmcloud.com/vulnerabilities/36593 oval:org.mitre.oval:def:9953 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9953 Common Vulnerability Exposure (CVE) ID: CVE-2007-3843 25244 http://www.securityfocus.com/bid/25244 26366 http://secunia.com/advisories/26366 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595 http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1 oval:org.mitre.oval:def:9670 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9670 Common Vulnerability Exposure (CVE) ID: CVE-2007-3848 20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability http://www.securityfocus.com/archive/1/476464/100/0/threaded 20070814 COSEINC Linux Advisory #1: Linux Kernel Parent Process DeathSignal Vulnerability http://marc.info/?l=bugtraq&m=118711306802632&w=2 20070814 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability http://www.securityfocus.com/archive/1/476538/100/0/threaded 20070815 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability http://www.securityfocus.com/archive/1/476677/100/0/threaded 20070816 Re: COSEINC Linux Advisory #1: Linux Kernel Parent Process Death Signal Vulnerability http://www.securityfocus.com/archive/1/476803/100/0/threaded 25387 http://www.securityfocus.com/bid/25387 26450 http://secunia.com/advisories/26450 29570 http://secunia.com/advisories/29570 33280 http://secunia.com/advisories/33280 DSA-1356 http://www.debian.org/security/2007/dsa-1356 DSA-1503 http://www.debian.org/security/2008/dsa-1503 RHSA-2008:0787 http://www.redhat.com/support/errata/RHSA-2008-0787.html SUSE-SA:2008:017 http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html [openwall-announce] 20070814 Linux 2.4.35-ow2 http://marc.info/?l=openwall-announce&m=118710356812637&w=2 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4 https://issues.rpath.com/browse/RPL-1648 oval:org.mitre.oval:def:10120 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10120 Common Vulnerability Exposure (CVE) ID: CVE-2007-4308 BugTraq ID: 25216 http://www.securityfocus.com/bid/25216 Bugtraq: 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates (Google Search) http://www.securityfocus.com/archive/1/488457/100/0/threaded Debian Security Information: DSA-1363 (Google Search) Debian Security Information: DSA-1503 (Google Search) Debian Security Information: DSA-1504 (Google Search) http://lists.vmware.com/pipermail/security-announce/2008/000005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8872 http://securitytracker.com/id?1019470 http://secunia.com/advisories/26322 http://secunia.com/advisories/29032 SuSE Security Announcement: SUSE-SA:2007:064 (Google Search) SuSE Security Announcement: SUSE-SA:2008:006 (Google Search) SuSE Security Announcement: SUSE-SA:2008:017 (Google Search) http://www.vupen.com/english/advisories/2007/2786 http://www.vupen.com/english/advisories/2008/0637 Common Vulnerability Exposure (CVE) ID: CVE-2007-4571 1018734 http://www.securitytracker.com/id?1018734 20070925 Linux Kernel ALSA snd_mem_proc_read Information Disclosure Vulnerability http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=600 25807 http://www.securityfocus.com/bid/25807 26918 http://secunia.com/advisories/26918 26980 http://secunia.com/advisories/26980 26989 http://secunia.com/advisories/26989 27101 http://secunia.com/advisories/27101 27824 http://secunia.com/advisories/27824 28626 29054 http://secunia.com/advisories/29054 30769 http://secunia.com/advisories/30769 ADV-2007-3272 http://www.vupen.com/english/advisories/2007/3272 DSA-1479 DSA-1505 http://www.debian.org/security/2008/dsa-1505 FEDORA-2007-2349 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00436.html FEDORA-2007-714 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00083.html RHSA-2007:0993 http://www.redhat.com/support/errata/RHSA-2007-0993.html USN-618-1 http://www.ubuntu.com/usn/usn-618-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccec6e2c4a74adf76ed4e2478091a311b1806212 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 https://issues.rpath.com/browse/RPL-1761 linux-sndpagealloc-information-disclosure(36780) https://exchange.xforce.ibmcloud.com/vulnerabilities/36780 oval:org.mitre.oval:def:9053 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9053
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.