|
|
| |
|
| |
kernel: denial of service
| Package(s): | kernel |
CVE #(s): | CVE-2012-2744
CVE-2012-2745
|
| Created: | July 10, 2012 |
Updated: | October 24, 2012 |
| Description: |
From the Red Hat advisory:
* A NULL pointer dereference flaw was found in the nf_ct_frag6_reasm()
function in the Linux kernel's netfilter IPv6 connection tracking
implementation. A remote attacker could use this flaw to send
specially-crafted packets to a target system that is using IPv6 and also
has the nf_conntrack_ipv6 kernel module loaded, causing it to crash.
(CVE-2012-2744, Important)
* A flaw was found in the way the Linux kernel's key management facility
handled replacement session keyrings on process forks. A local,
unprivileged user could use this flaw to cause a denial of service.
(CVE-2012-2745, Moderate) |
| Alerts: |
|
( Log in to post comments)
|
|
|