Summary
kernel-uek
[3.8.13-118.16.4]
- dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov) {CVE-2017-6074}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.16.4.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.16.4.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.16.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.16.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.16.4.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.16.4.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.16.4.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.16.4.el7uek |
Vulnerabilities 1
-
Unscored —CVE-2017-6074 Public exploit
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST …