RHEL 5 : kernel (RHSA-2011:0927)

medium Nessus Plugin ID 55597

Language:

Synopsis

The remote Red Hat host is missing one or more security updates for kernel.

Description

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0927 advisory.

- kernel: IB/uverbs: Handle large number of entries in poll CQ (CVE-2010-4649, CVE-2011-1044)

- kernel: panic in ib_cm:cm_work_handler (CVE-2011-0695)

- kernel: xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 (CVE-2011-0711)

- kernel signal spoofing issue (CVE-2011-1182)

- kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set (CVE-2011-1573)

- kernel: net: Fix memory leak/corruption on VLAN GRO_DROP (CVE-2011-1576)

- kernel: proc: signedness issue in next_pidmap() (CVE-2011-1593)

- kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls (CVE-2011-1745, CVE-2011-2022)

- kernel: agp: insufficient page_count parameter checking in agp_allocate_memory() (CVE-2011-1746)

- kernel: validate size of EFI GUID partition entries (CVE-2011-1776)

- kernel: xen: vmx: insecure cpuid vmexit (CVE-2011-1936)

- kernel: inet_diag: insufficient validation (CVE-2011-2213)

- kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace (CVE-2011-2492)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL kernel package based on the guidance in RHSA-2011:0927.

Plugin Details

Severity: Medium

ID: 55597

File Name: redhat-RHSA-2011-0927.nasl

Version: 1.29

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 7/15/2011

Updated: 4/27/2024

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Temporal Score: 6

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2011-2022

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.8

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

CVSS Score Source: CVE-2011-1776

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:kernel-kdump, p-cpe:/a:redhat:enterprise_linux:kernel-kdump-devel, p-cpe:/a:redhat:enterprise_linux:kernel, p-cpe:/a:redhat:enterprise_linux:kernel-pae, p-cpe:/a:redhat:enterprise_linux:kernel-pae-devel, p-cpe:/a:redhat:enterprise_linux:kernel-debug, p-cpe:/a:redhat:enterprise_linux:kernel-debug-devel, p-cpe:/a:redhat:enterprise_linux:kernel-devel, p-cpe:/a:redhat:enterprise_linux:kernel-headers, p-cpe:/a:redhat:enterprise_linux:kernel-xen, p-cpe:/a:redhat:enterprise_linux:kernel-xen-devel, cpe:/o:redhat:enterprise_linux:5

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/15/2011

Vulnerability Publication Date: 2/18/2011

Reference Information

CVE: CVE-2010-4649, CVE-2011-0695, CVE-2011-0711, CVE-2011-1044, CVE-2011-1182, CVE-2011-1573, CVE-2011-1576, CVE-2011-1593, CVE-2011-1745, CVE-2011-1746, CVE-2011-1776, CVE-2011-1936, CVE-2011-2022, CVE-2011-2213, CVE-2011-2492

BID: 46073, 46417, 46488, 46839, 47003, 47308, 47497, 47534, 47535, 47796, 47843, 48333, 48441, 48610

CWE: 401

RHSA: 2011:0927

Detections

Analytics

RHEL 5 : kernel (RHSA-2011:0927)

medium Nessus Plugin ID 55597

Synopsis

Description

Solution

See Also

Plugin Details

Risk Information

VPR

CVSS v2

CVSS v3

Vulnerability Information

Reference Information