Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. (CVE-2012-0957)

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. (CVE-2012-4565)

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1580 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issues:

    * It was found that the RHSA-2012:0862 update did not correctly fix the     CVE-2011-4131 issue. A malicious Network File System version 4 (NFSv4)     server could return a crafted reply to a GETACL request, causing a denial     of service on the client. (CVE-2012-2375, Moderate)

    * A divide-by-zero flaw was found in the TCP Illinois congestion control     algorithm implementation in the Linux kernel. If the TCP Illinois     congestion control algorithm were in use (the sysctl     net.ipv4.tcp_congestion_control variable set to illinois), a local,     unprivileged user could trigger this flaw and cause a denial of service.
    (CVE-2012-4565, Moderate)

    * A NULL pointer dereference flaw was found in the way a new node's hot     added memory was propagated to other nodes' zonelists. By utilizing this     newly added memory from one of the remaining nodes, a local, unprivileged     user could use this flaw to cause a denial of service. (CVE-2012-5517,     Moderate)

    * It was found that the initial release of Red Hat Enterprise Linux 6 did     not correctly fix the CVE-2009-4307 issue, a divide-by-zero flaw in the     ext4 file system code. A local, unprivileged user with the ability to mount     an ext4 file system could use this flaw to cause a denial of service.
    (CVE-2012-2100, Low)

    * A flaw was found in the way the Linux kernel's IPv6 implementation     handled overlapping, fragmented IPv6 packets. A remote attacker could     potentially use this flaw to bypass protection mechanisms (such as a     firewall or intrusion detection system (IDS)) when sending network packets     to a target system. (CVE-2012-4444, Low)

    Red Hat would like to thank Antonios Atlasis working with Beyond Security's     SecuriTeam Secure Disclosure program and Loganaden Velvindron of AFRINIC     for reporting CVE-2012-4444. The CVE-2012-2375 issue was discovered by Jian     Li of Red Hat, and CVE-2012-4565 was discovered by Rodrigo Freire of Red     Hat.

    This update also fixes numerous bugs and adds one enhancement. Space     precludes documenting all of these changes in this advisory. Documentation     for these changes will be available shortly from the Red Hat Enterprise     Linux 6.3 Technical Notes document linked to in the References section.

    Users should upgrade to these updated packages, which contain backported     patches to correct these issues, fix these bugs and add the enhancement     noted in the Technical Notes. The system must be rebooted for this update     to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-97:01 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel     handles the basic functions of the operating system: memory allocation, process allocation, device input     and output, etc.
    Security issues fixed with this release:
     CVE-2012-2100     The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform     and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-     groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super     block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists     because of an incomplete fix for CVE-2009-4307.
     CVE-2012-2375     The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel     before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to     cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply.
    NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.
     CVE-2012-4444     The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote     attackers to bypass intended network restrictions via overlapping IPv6 fragments.
     CVE-2012-4565     The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the     net.ipv4.tcp_congestion_control illinois setting is enabled, allows local users to cause a denial of     service (divide-by-zero error and OOPS) by reading TCP stats.
     CVE-2012-5517     The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to     cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other     impact in opportunistic circumstances by using memory that was hot-added by an administrator.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. (CVE-2012-0957)

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. (CVE-2012-4565).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated kernel packages that fix multiple security issues, numerous bugs and add one enhancement are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

This update fixes the following security issues :

* It was found that the RHSA-2012:0862 update did not correctly fix the CVE-2011-4131 issue. A malicious Network File System version 4 (NFSv4) server could return a crafted reply to a GETACL request, causing a denial of service on the client. (CVE-2012-2375, Moderate)

* A divide-by-zero flaw was found in the TCP Illinois congestion control algorithm implementation in the Linux kernel. If the TCP Illinois congestion control algorithm were in use (the sysctl net.ipv4.tcp_congestion_control variable set to 'illinois'), a local, unprivileged user could trigger this flaw and cause a denial of service. (CVE-2012-4565, Moderate)

* A NULL pointer dereference flaw was found in the way a new node's hot added memory was propagated to other nodes' zonelists. By utilizing this newly added memory from one of the remaining nodes, a local, unprivileged user could use this flaw to cause a denial of service. (CVE-2012-5517, Moderate)

* It was found that the initial release of Red Hat Enterprise Linux 6 did not correctly fix the CVE-2009-4307 issue, a divide-by-zero flaw in the ext4 file system code. A local, unprivileged user with the ability to mount an ext4 file system could use this flaw to cause a denial of service. (CVE-2012-2100, Low)

* A flaw was found in the way the Linux kernel's IPv6 implementation handled overlapping, fragmented IPv6 packets. A remote attacker could potentially use this flaw to bypass protection mechanisms (such as a firewall or intrusion detection system (IDS)) when sending network packets to a target system. (CVE-2012-4444, Low)

Red Hat would like to thank Antonios Atlasis working with Beyond Security's SecuriTeam Secure Disclosure program and Loganaden Velvindron of AFRINIC for reporting CVE-2012-4444. The CVE-2012-2375 issue was discovered by Jian Li of Red Hat, and CVE-2012-4565 was discovered by Rodrigo Freire of Red Hat.

This update also fixes numerous bugs and adds one enhancement. Space precludes documenting all of these changes in this advisory.
Documentation for these changes will be available shortly from the Red Hat Enterprise Linux 6.3 Technical Notes document linked to in the References section.

Users should upgrade to these updated packages, which contain backported patches to correct these issues, fix these bugs and add the enhancement noted in the Technical Notes. The system must be rebooted for this update to take effect.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2048 advisory.

    - ext4: fix undefined behavior in ext4_fill_flex_info() (Xi Wang) [orabug 16020245] {CVE-2012-2100}
    - Divide by zero in TCP congestion control Algorithm (Jesper Dangaard Brouer) [orabug 16020447]     {CVE-2012-4565}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A use-after-free flaw was found in the Linux kernel's memory management subsystem in the way quota handling for huge pages was performed. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges.
(CVE-2012-2133 , Moderate)

A use-after-free flaw was found in the madvise() system call implementation in the Linux kernel. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges. (CVE-2012-3511 , Moderate)

It was found that when running a 32-bit binary that uses a large number of shared libraries, one of the libraries would always be loaded at a predictable address in memory. An attacker could use this flaw to bypass the Address Space Layout Randomization (ASLR) security feature. (CVE-2012-1568 , Low)

Buffer overflow flaws were found in the udf_load_logicalvol() function in the Universal Disk Format (UDF) file system implementation in the Linux kernel. An attacker with physical access to a system could use these flaws to cause a denial of service or escalate their privileges.
(CVE-2012-3400 , Low)

Updated kernel-rt packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise MRG 2.2.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system.

This update fixes the following security issues :

* A flaw was found in the way Netlink messages without SCM_CREDENTIALS (used for authentication) data set were handled. When not explicitly set, the data was sent but with all values set to 0, including the process ID and user ID, causing the Netlink message to appear as if it were sent with root privileges. A local, unprivileged user could use this flaw to send spoofed Netlink messages to an application, possibly resulting in the application performing privileged operations if it relied on SCM_CREDENTIALS data for the authentication of Netlink messages. (CVE-2012-3520, Important)

* A race condition was found in the way asynchronous I/O and fallocate() interacted when using the ext4 file system. A local, unprivileged user could use this flaw to expose random data from an extent whose data blocks have not yet been written, and thus contain data from a deleted file. (CVE-2012-4508, Important)

* A use-after-free flaw was found in the Linux kernel's memory management subsystem in the way quota handling for huge pages was performed. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges.
(CVE-2012-2133, Moderate)

* A use-after-free flaw was found in the madvise() system call implementation in the Linux kernel. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges. (CVE-2012-3511, Moderate)

* A divide-by-zero flaw was found in the TCP Illinois congestion control algorithm implementation in the Linux kernel. If the TCP Illinois congestion control algorithm were in use (the sysctl net.ipv4.tcp_congestion_control variable set to 'illinois'), a local, unprivileged user could trigger this flaw and cause a denial of service. (CVE-2012-4565, Moderate)

* An information leak flaw was found in the uname() system call implementation in the Linux kernel. A local, unprivileged user could use this flaw to leak kernel stack memory to user-space by setting the UNAME26 personality and then calling the uname() system call.
(CVE-2012-0957, Low)

* Buffer overflow flaws were found in the udf_load_logicalvol() function in the Universal Disk Format (UDF) file system implementation in the Linux kernel. An attacker with physical access to a system could use these flaws to cause a denial of service or escalate their privileges. (CVE-2012-3400, Low)

* A flaw was found in the way the msg_namelen variable in the rds_recvmsg() function of the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation was initialized. A local, unprivileged user could use this flaw to leak kernel stack memory to user-space.
(CVE-2012-3430, Low)

Red Hat would like to thank Pablo Neira Ayuso for reporting CVE-2012-3520; Theodore Ts'o for reporting CVE-2012-4508; Shachar Raindel for reporting CVE-2012-2133; and Kees Cook for reporting CVE-2012-0957. Upstream acknowledges Dmitry Monakhov as the original reporter of CVE-2012-4508. The CVE-2012-4565 issue was discovered by Rodrigo Freire of Red Hat, and the CVE-2012-3430 issue was discovered by the Red Hat InfiniBand team.

This update also fixes multiple bugs. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section.

Users should upgrade to these updated packages, which upgrade the kernel-rt kernel to version kernel-rt-3.2.33-rt50, and correct these issues. The system must be rebooted for this update to take effect.

This Linux 3.6.5 stable update contains a large number of important bugfixes and security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security issues :

  - It was found that a previous update did not correctly     fix the CVE-2011-4131 issue. A malicious Network File     System version 4 (NFSv4) server could return a crafted     reply to a GETACL request, causing a denial of service     on the client. (CVE-2012-2375, Moderate)

  - A divide-by-zero flaw was found in the TCP Illinois     congestion control algorithm implementation in the Linux     kernel. If the TCP Illinois congestion control algorithm     were in use (the sysctl net.ipv4.tcp_congestion_control     variable set to 'illinois'), a local, unprivileged user     could trigger this flaw and cause a denial of service.
    (CVE-2012-4565, Moderate)

  - A NULL pointer dereference flaw was found in the way a     new node's hot added memory was propagated to other     nodes' zonelists. By utilizing this newly added memory     from one of the remaining nodes, a local, unprivileged     user could use this flaw to cause a denial of service.
    (CVE-2012-5517, Moderate)

  - It was found that the initial release of Scientific     Linux 6 did not correctly fix the CVE-2009-4307 issue, a     divide-by-zero flaw in the ext4 file system code. A     local, unprivileged user with the ability to mount an     ext4 file system could use this flaw to cause a denial     of service. (CVE-2012-2100, Low)

  - A flaw was found in the way the Linux kernel's IPv6     implementation handled overlapping, fragmented IPv6     packets. A remote attacker could potentially use this     flaw to bypass protection mechanisms (such as a firewall     or intrusion detection system (IDS)) when sending     network packets to a target system. (CVE-2012-4444, Low)

The system must be rebooted for this update to take effect.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - bonding: fixup typo in rlb mode of bond and bridge fix     (Guru Anbalagane) [Orabug: 16069448]

  - bonding: rlb mode of bond should not alter ARP     originating via bridge (zheng.li) [Orabug: 14650975]

  - compilation fix oracleasm typo (Maxim Uvarov)

  - mm/hotplug: correctly add new zone to all other nodes'     zone lists (Jiang Liu) [Orabug: 16020976 Bug-db: 14798]     (CVE-2012-5517)

  - Divide by zero in TCP congestion control Algorithm.
    (Jesper Dangaard Brouer) [Orabug: 16020656 Bug-db:
    14798] (CVE-2012-4565)

  - Fix length of buffer copied in __nfs4_get_acl_uncached     (Sachin Prabhu) [Bug- db: 14798] (CVE-2012-2375)

  - Avoid reading past buffer when calling GETACL (Sachin     Prabhu) [Bug-db: 14798] (CVE-2012-2375)

  - Avoid beyond bounds copy while caching ACL (Sachin     Prabhu) [Bug-db: 14798] (CVE-2012-2375)

  - oracleasm: Introduce module parameter for block size     selection (Martin K. Petersen) [Orabug: 15924773     16017829]

  - kernel posttrans remove all crashkernel=* (Jason Luan)     [Orabug: 15882974]

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
63117	USN-1645-1 : linux-ti-omap4 vulnerabilities	Nessus	Ubuntu Local Security Checks	2012/12/2	2016/12/1	medium
63119	USN-1647-1 : linux-ti-omap4 vulnerabilities	Nessus	Ubuntu Local Security Checks	2012/12/2	2016/12/1	medium
63122	Ubuntu 8.04 LTS : linux vulnerability (USN-1650-1)	Nessus	Ubuntu Local Security Checks	2012/12/2	2019/9/19	medium
63292	RHEL 6 : kernel (RHSA-2012:1580)	Nessus	Red Hat Local Security Checks	2012/12/19	2024/11/4	high
289643	MiracleLinux 4 : kernel-2.6.32-279.19.1.el6 (AXSA:2013-97:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/19	high
63116	Ubuntu 12.04 LTS : linux vulnerabilities (USN-1644-1)	Nessus	Ubuntu Local Security Checks	2012/12/2	2019/9/19	medium
63120	Ubuntu 11.10 : linux vulnerabilities (USN-1648-1)	Nessus	Ubuntu Local Security Checks	2012/12/2	2019/9/19	medium
63124	Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1652-1)	Nessus	Ubuntu Local Security Checks	2012/12/2	2019/9/19	medium
63305	CentOS 6 : kernel (CESA-2012:1580)	Nessus	CentOS Local Security Checks	2012/12/20	2021/1/4	high
68690	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2048)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high
69632	Amazon Linux AMI : kernel (ALAS-2012-142)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	high
76653	RHEL 6 : MRG (RHSA-2012:1491)	Nessus	Red Hat Local Security Checks	2014/7/22	2021/1/14	high
62831	Fedora 16 : kernel-3.6.5-2.fc16 (2012-17479)	Nessus	Fedora Local Security Checks	2012/11/7	2021/1/11	medium
63313	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20121218)	Nessus	Scientific Linux Local Security Checks	2012/12/20	2021/1/14	high
79495	OracleVM 3.2 : kernel-uek (OVMSA-2013-0003)	Nessus	OracleVM Local Security Checks	2014/11/26	2021/1/4	medium

检测

插件搜索

medium

medium

medium

high

high

medium

medium

medium

high

high

high

high

medium

high

medium