Summary
[4.1.12-103.7.4]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [Orabug: 27011255] {CVE-2017-7542}
- udp: consistently apply ufo or fragmentation (Willem de Bruijn) [Orabug: 26921320] {CVE-2017-1000112}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-103.7.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-103.7.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-103.7.4.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-103.7.4.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-103.7.4.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-103.7.4.el7uek |
Vulnerabilities 2
-
Unscored —
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE…
-
Unscored —
The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cau…