Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 33

Vulnerabilities 7

• Unscored —
  CVE-2013-2851

  Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows loc…

  linux Debian
  Jun 7, 2013
• Unscored —
  CVE-2013-4387

  net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Off…

  linux Debian
  Oct 10, 2013
• Unscored —
  CVE-2013-4470

  The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain dat…

  linux Debian
  Nov 4, 2013
• Unscored —
  CVE-2013-4591

  Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows lo…

  linux Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-6367

  The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows gues…

  linux Debian
  Dec 14, 2013
• Unscored —
  CVE-2013-6368

  The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service…

  linux Debian
  Dec 14, 2013
• Unscored —
  CVE-2013-6381

  Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12…

  linux kernel Debian Azure Linux
  Nov 27, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/kernel.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=969515
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1011927
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1023477
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1031678
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1032207
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1032210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1033600
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0284.json
• report
  https://access.redhat.com/security/cve/CVE-2013-2851
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-2851
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-2851
• report
  https://access.redhat.com/security/cve/CVE-2013-4387
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4387
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4387
• report
  https://access.redhat.com/security/cve/CVE-2013-4470
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4470
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4470
• report
  https://access.redhat.com/security/cve/CVE-2013-4591
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4591
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4591
• report
  https://access.redhat.com/security/cve/CVE-2013-6367
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-6367
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-6367
• report
  https://access.redhat.com/security/cve/CVE-2013-6368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-6368
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-6368
• report
  https://access.redhat.com/security/cve/CVE-2013-6381
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-6381
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-6381