Skip to content
OpenAdvisories
High ELSA-2014-3072 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 10, 2014 · Updated Sep 10, 2014

Summary

[3.8.13-44.1.1]
- auditsc: audit_krule mask accesses need bounds checking (Andy Lutomirski) [Orabug: 19590596] {CVE-2014-3917}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-44.1.1.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-44.1.1.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-44.1.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-44.1.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-44.1.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-44.1.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-44.1.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-44.1.1.el7uek

Vulnerabilities 1

  • Unscored —

    kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, al…