| |||||||||||||||||||
Pardus alert 2010-35 (kernel kernel-pae)
------------------------------------------------------------------------ Pardus Linux Security Advisory 2010-35 security@pardus.org.tr ------------------------------------------------------------------------ Date: 2010-02-25 Severity: 3 Type: Remote ------------------------------------------------------------------------ Summary ======= Multiple vulnerabilities have been fixed in kernel, which can be exploited by malicious people to cause denial of service, or possibly arbitrary code execution. Description =========== CVE-2010-0410: drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages. CVE-2010-0415: The do_pages_move function in mm/migrate.c in the Linux kernel does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set CVE-2009-4538: drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537. Affected packages: Pardus 2009: kernel, all before 2.6.31.11-130-43 kernel-pae, all before 2.6.31.11-130-24 Resolution ========== There are update(s) for kernel, kernel-pae. You can update them via Package Manager or with a single command from console: pisi up kernel kernel-pae References ========== * http://bugs.pardus.org.tr/show_bug.cgi?id=12090 * http://bugs.pardus.org.tr/show_bug.cgi?id=12210 * http://bugs.pardus.org.tr/show_bug.cgi?id=12243 ------------------------------------------------------------------------ _______________________________________________ Pardus-security mailing list Pardus-security@pardus.org.tr http://liste.pardus.org.tr/mailman/listinfo/pardus-security (Log in to post comments)
|
|||||||||||||||||||