kernel: two vulnerabilities
| Package(s): | kernel | CVE #(s): | CVE-2004-0230 CVE-2016-9685 | ||||||||||||||||||||
| Created: | January 31, 2017 | Updated: | February 1, 2017 | ||||||||||||||||||||
| Description: | From the CVE entries:
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP. (CVE-2004-0230) Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations. (CVE-2016-9685) | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||