Skip to content
OpenAdvisories
High ELSA-2014-3087 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Nov 13, 2014 · Updated Nov 13, 2014

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-44.1.5.el6uek]
- net: sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann) [Orabug: 20010590] {CVE-2014-3687}
- net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann) [Orabug: 20010577] {CVE-2014-3673}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-44.1.5.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-44.1.5.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-44.1.5.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-44.1.5.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-44.1.5.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-44.1.5.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-44.1.5.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-44.1.5.el7uek

Vulnerabilities 2