suse/kgraft-patch-SLE12-SP2_Update_16&distro=SUSE Linux Enterprise Live Patching 12

Vulnerabilities (18)

• CVE-2017-7482Jul 30, 2018
  affected < 1-3.3.1fixed 1-3.3.1

  In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory

• CVE-2017-18075Jan 24, 2018
  affected < 3-2.1fixed 3-2.1

  crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or po

• CVE-2017-17712HigDec 16, 2017
  affected < 2-2.1fixed 2-2.1

  The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

• CVE-2017-1000410HigDec 7, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their unini

• CVE-2017-17450HigDec 7, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all

• CVE-2017-17449MedDec 7, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveragin

• CVE-2017-17448HigDec 7, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all

• CVE-2017-8824HigDec 5, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

• CVE-2017-16994MedNov 27, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

• CVE-2017-12193MedNov 22, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyri

• CVE-2017-15115HigNov 15, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other imp

• CVE-2017-16646MedNov 7, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-16645MedNov 7, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB dev

• CVE-2017-16537MedNov 4, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-16536MedNov 4, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-16528MedNov 4, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-15265HigOct 16, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq

• CVE-2017-11600HigJul 24, 2017
  affected < 1-3.3.1fixed 1-3.3.1

  net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspe