p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kgraft-patch-sle12-sp3_update_23

За последние 30 дней в kgraft-patch-sle12-sp3_update_23 опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 3

  1. SUSE-SU-2019:1671-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bsc#1136446). - CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an integer overflow, leading to a kernel panic. (bsc#1137586). - CVE-2019-11478: It was possible to send a crafted sequence of SACKs which would fragment the TCP retransmission queue. A remote attacker may have been able to fu

    • Обновитесь до 3-2.1
  2. SUSE-SU-2019:0761-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.175-94_79 fixes one issue. The following security issue was fixed: - CVE-2019-9213: Expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bsc#1128378).

    • Обновитесь до 2-2.1
    Опубликовано Обновлено
  3. SUSE-SU-2019:0541-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.175 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandled reference counting because of a race condition, leading to a use-after-free. (bnc#1124728) - CVE-2019-7221: Fixed a user-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124732). - CVE-2019-7222: Fixed an information leakage in the KVM hypervisor related to handling page fault exceptions, which allowed a guest user/

    • Обновитесь до 1-4.7.1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →