Executive Summary
Summary | |
---|---|
Title | kernel security, bug fix, and enhancement update |
Informations | |||
---|---|---|---|
Name | RHSA-2016:1847 | First vendor Publication | 2016-09-14 |
Vendor | RedHat | Last vendor Modification | 2016-09-14 |
Severity (Vendor) | N/A | Revision | 01 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
---|---|---|---|
Cvss Base Score | 7.2 | Attack Range | Local |
Cvss Impact Score | 10 | Attack Complexity | Low |
Cvss Expoit Score | 3.9 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Problem Description: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A security flaw was found in the Linux kernel in the mark_source_chains() function in "net/ipv4/netfilter/ip_tables.c". It is possible for a user-supplied "ipt_entry" structure to have a large "next_offset" field. This field is not bounds checked prior to writing to a counter value at the supplied offset. (CVE-2016-3134, Important) * A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled with CONFIG_USER_NS and CONFIG_NET_NS and the user is granted elevated privileges. (CVE-2016-4997, Important) * An out-of-bounds heap memory access leading to a Denial of Service, heap disclosure, or further impact was found in setsockopt(). The function call is normally restricted to root, however some processes with cap_sys_admin may also be able to trigger this flaw in privileged container environments. (CVE-2016-4998, Moderate) Bug Fix(es): * In some cases, running the ipmitool command caused a kernel panic due to a race condition in the ipmi message handler. This update fixes the race condition, and the kernel panic no longer occurs in the described scenario. (BZ#1353947) * Previously, running I/O-intensive operations in some cases caused the system to terminate unexpectedly after a null pointer dereference in the kernel. With this update, a set of patches has been applied to the 3w-9xxx and 3w-sas drivers that fix this bug. As a result, the system no longer crashes in the described scenario. (BZ#1362040) * Previously, the Stream Control Transmission Protocol (SCTP) sockets did not inherit the SELinux labels properly. As a consequence, the sockets were labeled with the unlabeled_t SELinux type which caused SCTP connections to fail. The underlying source code has been modified, and SCTP connections now works as expected. (BZ#1354302) * Previously, the bnx2x driver waited for transmission completions when recovering from a parity event, which substantially increased the recovery time. With this update, bnx2x does not wait for transmission completion in the described circumstances. As a result, the recovery of bnx2x after a parity event now takes less time. (BZ#1351972) Enhancement(s): * With this update, the audit subsystem enables filtering of processes by name besides filtering by PID. Users can now audit by executable name (with the "-F exe= * With this update, the Nonvolatile Memory Express (NVMe) and the multi-queue block layer (blk_mq) have been upgraded to the Linux 4.5 upstream version. Previously, a race condition between timeout and freeing request in blk_mq occurred, which could affect the blk_mq_tag_to_rq() function and consequently a kernel oops could occur. The provided patch fixes this race condition by updating the tags with the active request. The patch simplifies blk_mq_tag_to_rq() and ensures that the two requests are not active at the same time. (BZ#1350352) * The Hyper-V storage driver (storvsc) has been upgraded from upstream. This update provides moderate performance improvement of I/O operations when using storvscr for certain workloads. (BZ#1360161) Additional Changes: Space precludes documenting all of the bug fixes and enhancements included in this advisory. To see the complete list of bug fixes and enhancements, refer to the following KnowledgeBase article: https://access.redhat.com/articles/2592321 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1317383 - CVE-2016-3134 kernel: netfilter: missing bounds check in ipt_entry structure 1349722 - CVE-2016-4997 kernel: compat IPT_SO_SET_REPLACE setsockopt 1349886 - CVE-2016-4998 kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt |
Original Source
Url : https://rhn.redhat.com/errata/RHSA-2016-1847.html |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
40 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
20 % | CWE-284 | Access Control (Authorization) Issues |
20 % | CWE-264 | Permissions, Privileges, and Access Controls |
20 % | CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2017-07-13 | Name : The remote Virtuozzo host is missing a security update. File : Virtuozzo_VZLSA-2017-0036.nasl - Type : ACT_GATHER_INFO |
2017-06-30 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3338-2.nasl - Type : ACT_GATHER_INFO |
2017-06-22 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3338-1.nasl - Type : ACT_GATHER_INFO |
2017-05-02 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-532.nasl - Type : ACT_GATHER_INFO |
2017-05-01 | Name : The remote EulerOS host is missing multiple security updates. File : EulerOS_SA-2016-1048.nasl - Type : ACT_GATHER_INFO |
2017-04-03 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0057.nasl - Type : ACT_GATHER_INFO |
2017-02-16 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2017-0471-1.nasl - Type : ACT_GATHER_INFO |
2017-01-31 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2017-0333-1.nasl - Type : ACT_GATHER_INFO |
2017-01-13 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20170110_kernel_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
2017-01-13 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2017-0036.nasl - Type : ACT_GATHER_INFO |
2017-01-11 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2017-0036.nasl - Type : ACT_GATHER_INFO |
2017-01-11 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2017-0036.nasl - Type : ACT_GATHER_INFO |
2016-12-15 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20161103_kernel_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2016-12-05 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2976-1.nasl - Type : ACT_GATHER_INFO |
2016-11-28 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-2574.nasl - Type : ACT_GATHER_INFO |
2016-11-17 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0158.nasl - Type : ACT_GATHER_INFO |
2016-11-11 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-2574.nasl - Type : ACT_GATHER_INFO |
2016-11-04 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-2584.nasl - Type : ACT_GATHER_INFO |
2016-11-04 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-2574.nasl - Type : ACT_GATHER_INFO |
2016-10-27 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2659-1.nasl - Type : ACT_GATHER_INFO |
2016-10-27 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2658-1.nasl - Type : ACT_GATHER_INFO |
2016-10-27 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2655-1.nasl - Type : ACT_GATHER_INFO |
2016-10-26 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2632-1.nasl - Type : ACT_GATHER_INFO |
2016-10-26 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2633-1.nasl - Type : ACT_GATHER_INFO |
2016-10-26 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2636-1.nasl - Type : ACT_GATHER_INFO |
2016-10-07 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0139.nasl - Type : ACT_GATHER_INFO |
2016-10-07 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0138.nasl - Type : ACT_GATHER_INFO |
2016-10-07 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3625.nasl - Type : ACT_GATHER_INFO |
2016-10-07 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3624.nasl - Type : ACT_GATHER_INFO |
2016-10-07 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3623.nasl - Type : ACT_GATHER_INFO |
2016-09-26 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0134.nasl - Type : ACT_GATHER_INFO |
2016-09-23 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3618.nasl - Type : ACT_GATHER_INFO |
2016-09-23 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3617.nasl - Type : ACT_GATHER_INFO |
2016-09-23 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3619.nasl - Type : ACT_GATHER_INFO |
2016-09-23 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0100.nasl - Type : ACT_GATHER_INFO |
2016-09-23 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0133.nasl - Type : ACT_GATHER_INFO |
2016-09-20 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-1847.nasl - Type : ACT_GATHER_INFO |
2016-09-16 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20160915_kernel_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2016-09-16 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-1875.nasl - Type : ACT_GATHER_INFO |
2016-09-16 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-1847.nasl - Type : ACT_GATHER_INFO |
2016-09-15 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-1883.nasl - Type : ACT_GATHER_INFO |
2016-09-15 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-1847.nasl - Type : ACT_GATHER_INFO |
2016-09-13 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-1076.nasl - Type : ACT_GATHER_INFO |
2016-09-08 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2245-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2010-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2014-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2018-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2074-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2105-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2006-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2005-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2002-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2001-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1995-1.nasl - Type : ACT_GATHER_INFO |
2016-08-31 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3070-4.nasl - Type : ACT_GATHER_INFO |
2016-08-31 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-3070-3.nasl - Type : ACT_GATHER_INFO |
2016-08-31 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-3070-2.nasl - Type : ACT_GATHER_INFO |
2016-08-30 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3070-1.nasl - Type : ACT_GATHER_INFO |
2016-08-30 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-1029.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1696-1.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3596.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1672-1.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1690-1.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1709-1.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1710-1.nasl - Type : ACT_GATHER_INFO |
2016-08-25 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-1015.nasl - Type : ACT_GATHER_INFO |
2016-08-11 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3049-1.nasl - Type : ACT_GATHER_INFO |
2016-08-01 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0091.nasl - Type : ACT_GATHER_INFO |
2016-08-01 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3587.nasl - Type : ACT_GATHER_INFO |
2016-07-20 | Name : The remote Fedora host is missing a security update. File : fedora_2016-63ee0999e4.nasl - Type : ACT_GATHER_INFO |
2016-07-15 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-869.nasl - Type : ACT_GATHER_INFO |
2016-07-15 | Name : The remote Fedora host is missing a security update. File : fedora_2016-73a733f4d9.nasl - Type : ACT_GATHER_INFO |
2016-07-15 | Name : The remote Fedora host is missing a security update. File : fedora_2016-1c409313f4.nasl - Type : ACT_GATHER_INFO |
2016-07-12 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-862.nasl - Type : ACT_GATHER_INFO |
2016-06-29 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3607.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3020-1.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2016-718.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3016-1.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-3016-2.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-3016-3.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3016-4.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3017-1.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3017-3.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3018-1.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3018-2.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3019-1.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-3017-2.nasl - Type : ACT_GATHER_INFO |
2016-06-22 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-753.nasl - Type : ACT_GATHER_INFO |
2016-06-20 | Name : The remote Debian host is missing a security update. File : debian_DLA-516.nasl - Type : ACT_GATHER_INFO |
2016-04-29 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2016-694.nasl - Type : ACT_GATHER_INFO |
2016-04-05 | Name : The remote Fedora host is missing a security update. File : fedora_2016-81fd1b03aa.nasl - Type : ACT_GATHER_INFO |
2016-03-24 | Name : The remote Fedora host is missing a security update. File : fedora_2016-3a57b19360.nasl - Type : ACT_GATHER_INFO |
2016-03-24 | Name : The remote Fedora host is missing a security update. File : fedora_2016-02ed08bf15.nasl - Type : ACT_GATHER_INFO |
2016-03-17 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2930-3.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2929-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2932-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2931-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2930-2.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2930-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2929-2.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2018-01-05 09:26:24 |
|
2016-09-21 13:25:39 |
|
2016-09-17 13:26:12 |
|
2016-09-15 13:23:29 |
|