Medium RHSA-2018:2172 2 CVEs

Red Hat Security Advisory: kernel security update

Published Sep 29, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

Release	Package	Fixed in
Red Hat · RHEL 5 ELS rhel_els:5	kernel	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-debug	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-debug-debuginfo	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-debug-devel	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-debuginfo	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-debuginfo-common	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-devel	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-doc	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-headers	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-kdump	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-kdump-debuginfo	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-kdump-devel	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-PAE	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-PAE-debuginfo	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-PAE-devel	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-xen	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-xen-debuginfo	0:2.6.18-433.el5
Red Hat · RHEL 5 ELS rhel_els:5	kernel-xen-devel	0:2.6.18-433.el5

Vulnerabilities 2

Medium 5.5

CVE-2018-3639 Public exploit EPSS 60%

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

May 22, 2018
Unscored —

CVE-2017-14106

The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of s…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 1, 2017

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/security/vulnerabilities/ssbd
report
https://bugzilla.redhat.com/show_bug.cgi?id=1487295
report
https://bugzilla.redhat.com/show_bug.cgi?id=1566890
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2172.json
report
https://access.redhat.com/security/cve/CVE-2017-14106
advisory
https://www.cve.org/CVERecord?id=CVE-2017-14106
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14106
report
https://access.redhat.com/security/cve/CVE-2018-3639
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3639
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3639
article
https://bugs.chromium.org/p/project-zero/issues/detail?id=1528
article
https://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf
article
https://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf
article
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html