Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceSL6

SciLinux: SLSA-2018-2846-1 Critical: kernel Denial of Service Issue

A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391) * kernel: Integer overflow in [More...]. Synopsis: Important: kernel security and bug fix update Advisory ID: SLSA-2018:2846-1 Issue Date: 2018-10-09 CVE Numbers: CVE-2018-14634 CVE-2018-5391 -- Security Fix(es): * A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391) * kernel: Integer overflow in Linux's create_elf_tables function (CVE-2018-14634) -- SL6 x86_64 kernel-2.6.32-754.6.3.el6.x86_64.rpm kernel-debug-2.6.32-754.6.3.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.6.3.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.6.3.el6.i686.rpm kernel-debug-devel-2.6.32-754.6.3.el6.x86_64.rpm kernel-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-2.6.32-754.6.3.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-754.6.3.el6.x86_64.rpm kernel-devel-2.6.32-754.6.3.el6.x86_64.rpm kernel-headers-2.6.32-754.6.3.el6.x86_64.rpm perf-2.6.32-754.6.3.el6.x86_64.rpm perf-debuginfo-2.6.32-754.6.3.el6.i686.rpm perf-debuginfo-2.6.32-754.6.3.el6.x86_64.rpm python-perf-debuginfo-2.6.32-754.6.3.el6.i686.rpm python-perf-debuginfo-2.6.32-754.6.3.el6.x86_64.rpm python-perf-2.6.32-754.6.3.el6.x86_64.rpm i386 kernel-2.6.32-754.6.3.el6.i686.rpm kernel-debug-2.6.32-754.6.3.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debug-devel-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-2.6.32-754.6.3.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-754.6.3.el6.i686.rpm kernel-devel-2.6.32-754.6.3.el6.i686.rpm kernel-headers-2.6.32-754.6.3.el6.i686.rpm perf-2.6.32-754.6.3.el6.i686.rpm perf-debuginfo-2.6.32-754.6.3.el6.i686.rpm python-perf-debuginfo-2.6.32-754.6.3.el6.i686.rpm python-perf-2.6.32-754.6.3.el6.i686.rpm noarch kernel-abi-whitelists-2.6.32-754.6.3.el6.noarch.rpm kernel-doc-2.6.32-754.6.3.el6.noarch.rpm kernel-firmware-2.6.32-754.6.3.el6.noarch.rpm - Scientific Linux Development Team . This critical kernel patch tackles the Spectre and buffer overflow vulnerabilities affecting Scientific Linux 6.x kernel.. kernel update, security patch, SL6 kernel, denial of service, CPU saturation. . Severity: Critical. LinuxSecurity.com Team

Oct 10, 2018 •Critical Scientific Linux