CVE-2017-1000112

mediumPriorität · beachten · 45EPSS 0.208 · 98. PerzentilExploit · funktionalDEEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

9 exploits · funktional

Likely / severe?

20.8% (98th) EPSS

CVSS 6.9 · medium

Is it mine?

85 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · bewertet 2026-10-26

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb->len becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev->len - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 ("[IPv4/IPv6]: UFO Scatter-gather approach") on Oct 18 2005.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenkernel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-0:2.6.18-438.el5.src as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-PAE-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-PAE-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-PAE-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-debuginfo-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-debuginfo-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-devel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debug-devel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debuginfo-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debuginfo-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debuginfo-common-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debuginfo-common-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-debuginfo-common-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-devel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-devel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-doc-0:2.6.18-438.el5.noarch as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-headers-0:2.6.18-438.el5.i386 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-headers-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-headers-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-kdump-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-kdump-debuginfo-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-kdump-devel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-xen-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-xen-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-xen-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-xen-debuginfo-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-xen-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-xen-devel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Behobenkernel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-0:2.6.18-348.44.1.el5.src as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-PAE-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-PAE-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-PAE-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debug-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debug-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debug-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debug-debuginfo-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debug-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debug-devel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debuginfo-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debuginfo-common-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-debuginfo-common-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-devel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-doc-0:2.6.18-348.44.1.el5.noarch as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-headers-0:2.6.18-348.44.1.el5.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-headers-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-xen-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-xen-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-xen-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-xen-debuginfo-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-xen-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Behobenkernel-xen-devel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.8–7

v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.4 · Auswirkung 10

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1 · Auswirkung 5.9

v3.07highCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

v3.16.8mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Fsecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-362USprimärCWE-122US

Exploits (9)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-43418Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04/16.04) - Local Privilege Escalation (KASLR / SMEP)funktional · exploit_db
EDB-45147Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)funktional · exploit_db
exploit/linux/local/ufo_privilege_escalationLinux Kernel UDP Fragmentation Offset (UFO) Privilege Escalationfunktional · metasploit
EDB-47169Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)PoC · exploit_db
IT19083124/SNP-AssignmentExploit work Privilege Escalation CVE-2017-1000112PoC · poc_in_github
Spydomain/CVE-2017-1000112-PoCSpydomain/CVE-2017-1000112-PoCPoC · poc_in_github

betroffene Produkte (85)

Betroffene Produkte und Versionsbereiche.

Debian Linuxalle Versionencert_bundDEcpe:/o:debian:debian_linux:-
Dell Avamar <19.12alle Versionencert_bundDE
Open Source CentOSalle Versionencert_bundDEcpe:/o:centos:centos:-
Open Source Linux Kernelalle Versionencert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
SUSE Linux Enterprise Desktop 12-SP2alle Versionencert_bundDEcpe:/o:suse:linux_enterprise_desktop:12-sp2
SUSE Linux Enterprise Server 12-SP2alle Versionencert_bundDEcpe:/o:suse:linux_enterprise_server:12-sp2
Ubuntu Linux 12.04 LTSalle Versionencert_bundDEcpe:/o:canonical:ubuntu_linux:12.04_lts
Ubuntu Linux 14.04 LTSalle Versionencert_bundDEcpe:/o:canonical:ubuntu_linux:14.04_lts
Ubuntu Linux 16.04 LTSalle Versionencert_bundDEcpe:/o:canonical:ubuntu_linux:16.04_lts
Dell Avamar< 19.12cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
linux linux kernel2.6.15 → 3.10.108nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel3.11 → 3.16.47nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel3.17 → 3.18.65nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel3.19 → 4.4.82nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel4.10 → 4.12.7nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel4.5 → 4.9.43nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

20 von 85 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2019:1931Red Hat Security Advisory: kernel security and bug fix update2019-07-29csaf · redhat_csafUS
An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2019:1932Red Hat Security Advisory: kernel security update2019-07-29csaf · redhat_csafUS
An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2025-0269Linux Kernel: Mehrere SchwachstellenDeutsch2017-08-10csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um beliebigen Programmcode mit Administratorrechten oder den Privilegien des angegriffenen Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2017-10-05geändert 2026-06-17

verwandt (4,137)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-62215US	—OT kritisch	4.46% (91st)	KEV	2025-11-11
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-39964US	medium5.5OT kritisch	1.57% (75th)	KEV	2025-10-13
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is…
CVE-2025-2783US	—OT kritisch	9.24% (95th)	KEV	2025-03-26
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malic…
CVE-2025-22224US	high8.2OT kritisch	1.56% (75th)	KEV	2025-03-04
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges…
CVE-2023-36884US	—OT kritisch	99.4% (100th)	KEV	2023-07-11
Windows Search Remote Code Execution Vulnerability

+4132 weitere

Referenzen (48)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan