- kernel-xen-2.6.18-194.el5 (rhel5)
- 2.6.18-419.el5
- 2017-08-02 15:49:09
- 2017-08-02 12:49:14
- 02082017_2
- CVE-2012-1583
- Description:
[IPV6]: Fix slab corruption running ip6sic
- CVE: https://access.redhat.com/security/cve/CVE-2012-1583
- Patch: 2.6.18/linux-2.6-net-ipv6-fix-skb-double-free-in-xfrm6_tunnel.patch
- From: kernel-2.6.18-308.8.2.el5
- CVE-2012-2136
- Description:
net: sock: validate data_len before allocating skb in sock_alloc_send_pskb()
- CVE: https://access.redhat.com/security/cve/CVE-2012-2136
- Patch: 2.6.18/linux-2.6-net-sock-validate-data_len-before-allocating-skb-in-sock_alloc_send_pskb.patch
- From: kernel-2.6.18-308.8.2.el5
- CVE-2012-2313
- Description:
dl2k: Clean up rio_ioctl
- CVE: https://access.redhat.com/security/cve/CVE-2012-2313
- Patch: 2.6.18/linux-2.6-net-dl2k-clean-up-rio_ioctl.patch
- From: kernel-2.6.18-308.13.1.el5
- CVE-2012-2319
- Description:
hfsplus: Fix potential buffer overflows
- CVE: https://access.redhat.com/security/cve/CVE-2012-2319
- Patch: 2.6.18/linux-2.6-fs-hfsplus-buffer-overflow-in-the-hfs-plus-filesystem-5.patch
- From: kernel-2.6.18-308.16.1.el5
- CVE-2012-3430
- Description:
net: rds: set correct msg_namelen
- CVE: https://access.redhat.com/security/cve/CVE-2012-3430
- Patch: 2.6.18/linux-2.6-net-rds-set-correct-msg_namelen.patch
- From: kernel-2.6.18-308.16.1.el5
- CVE-2012-2100
- Description:
- CVE: https://access.redhat.com/security/cve/CVE-2012-2100
- Patch: 2.6.18/linux-2.6-ext4-fix-undefined-behavior-in-ext4_fill_flex_info.patch
- From: kernel-2.6.18-308.20.1.el5
- CVE-2012-2100
- Description:
- CVE: https://access.redhat.com/security/cve/CVE-2012-2100
- Patch: 2.6.18/linux-2.6-fs-ext4-fix-undefined-bit-shift-result-in-ext4_fill_flex_info.patch
- From: kernel-2.6.18-308.20.1.el5
- CVE-2012-2372
- Description:
[net] rds: fix rds-ping inducing kernel panic
- CVE: https://access.redhat.com/security/cve/CVE-2012-2372
- Patch: 2.6.18/linux-2.6-net-rds-fix-rds-ping-inducing-kernel-panic.patch
- From: kernel-2.6.18-308.24.1.el5
- CVE-2012-4444
- Description:
kernel: net: acceptation of overlapping ipv6 fragments
- CVE: https://access.redhat.com/security/cve/CVE-2012-4444
- Patch: 2.6.18/linux-2.6-net-ipv6-discard-overlapping-fragment.patch
- From: kernel-2.6.18-348.1.1.el5
- CVE-2012-3400
- Description:
kernel: udf: buffer overflow when parsing sparing table
- CVE: https://access.redhat.com/security/cve/CVE-2012-3400
- Patch: 2.6.18/linux-2.6-fs-udf-avoid-run-away-loop-when-partition-table-is-corrupted.patch
- From: kernel-2.6.18-348.2.1.el5
- CVE-2012-3400
- Description:
kernel: udf: buffer overflow when parsing sparing table
- CVE: https://access.redhat.com/security/cve/CVE-2012-3400
- Patch: 2.6.18/linux-2.6-fs-udf-improve-table-length-check-to-avoid-possible-overflow.patch
- From: kernel-2.6.18-348.2.1.el5
- CVE-2012-3400
- Description:
kernel: udf: buffer overflow when parsing sparing table
- CVE: https://access.redhat.com/security/cve/CVE-2012-3400
- Patch: 2.6.18/linux-2.6-fs-udf-fortify-loading-of-sparing-table.patch
- From: kernel-2.6.18-348.2.1.el5
- CVE-2013-0268
- Description:
kernel: x86/msr: /dev/cpu/*/msr local privilege escalation
- CVE: https://access.redhat.com/security/cve/CVE-2013-0268
- Patch: 2.6.18/linux-2.6-x86-msr-add-capabilities-check.patch
- From: kernel-2.6.18-348.3.1.el5
- CVE-2013-0871
- Description:
kernel: race condition with PTRACE_SETREGS
- CVE: https://access.redhat.com/security/cve/CVE-2013-0871
- Patch: 2.6.18/linux-2.6-utrace-ensure-arch_ptrace-can-never-race-with-sigkill.patch
- From: kernel-2.6.18-348.3.1.el5
- CVE-2012-6537
- Description:
Kernel: xfrm_user information leaks copy_to_user_
- CVE: https://access.redhat.com/security/cve/CVE-2012-6537
- Patch: 2.6.18/linux-2.6-net-xfrm_user-fix-info-leak-in-copy_to_user_tmpl.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2012-6537
- Description:
Kernel: xfrm_user information leaks copy_to_user_
- CVE: https://access.redhat.com/security/cve/CVE-2012-6537
- Patch: 2.6.18/linux-2.6-net-xfrm_user-fix-info-leak-in-copy_to_user_policy.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2012-6537
- Description:
Kernel: xfrm_user information leaks copy_to_user_
- CVE: https://access.redhat.com/security/cve/CVE-2012-6537
- Patch: 2.6.18/linux-2.6-net-xfrm_user-fix-info-leak-in-copy_to_user_state.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2013-1826
- Description:
Kernel: xfrm_user: return error pointer instead of NULL
- CVE: https://access.redhat.com/security/cve/CVE-2013-1826
- Patch: 2.6.18/linux-2.6-net-xfrm_user-return-error-pointer-instead-of-null.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2012-6547
- Description:
Kernel: net/tun: ioctl() based information leaks
- CVE: https://access.redhat.com/security/cve/CVE-2012-6547
- Patch: 2.6.18/for-238/linux-2.6-net-tun-fix-ioctl-based-info-leaks.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2012-6546
- Description:
Kernel: atm: information leak in getsockopt & getsockname
- CVE: https://access.redhat.com/security/cve/CVE-2012-6546
- Patch: 2.6.18/linux-2.6-net-atm-fix-info-leak-via-getsockname.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2012-6546
- Description:
Kernel: atm: information leak in getsockopt & getsockname
- CVE: https://access.redhat.com/security/cve/CVE-2012-6546
- Patch: 2.6.18/linux-2.6-net-atm-fix-info-leak-in-getsockopt-so_atmpvc.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2013-0231
- Description:
kernel: xen: pciback DoS via not rate limited log messages
- CVE: https://access.redhat.com/security/cve/CVE-2013-0231
- Patch: 2.6.18/linux-2.6-virt-pciback-rate-limit-error-mess-from-pciback_enable_msi.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2013-0216, CVE-2013-0217
- Description:
kernel: xen: Linux netback DoS via malicious guest ring.
- CVE: https://access.redhat.com/security/cve/CVE-2013-0216
- Patch: 2.6.18/for-274/linux-2.6-virt-xen-netback-netif_schedulable-should-take-a-netif.patch
- From: kernel-2.6.18-348.4.1.el5
- CVE-2012-6545
- Description:
Kernel: Bluetooth: RFCOMM - information leak
- CVE: https://access.redhat.com/security/cve/CVE-2012-6545
- Patch: 2.6.18/linux-2.6-net-bluetooth-rfcomm-fix-info-leak-via-getsockname.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2012-6545
- Description:
Kernel: Bluetooth: RFCOMM - information leak
- CVE: https://access.redhat.com/security/cve/CVE-2012-6545
- Patch: 2.6.18/linux-2.6-net-bluetooth-rfcomm-fix-info-leak-in-ioctl-rfcommgetdevlist.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-3222
- Description:
Kernel: atm: update msg_namelen in vcc_recvmsg()
- CVE: https://access.redhat.com/security/cve/CVE-2013-3222
- Patch: 2.6.18/linux-2.6-net-atm-update-msg_namelen-in-vcc_recvmsg.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-3224
- Description:
Kernel: Bluetooth: possible info leak in bt_sock_recvmsg()
- CVE: https://access.redhat.com/security/cve/CVE-2013-3224
- Patch: 2.6.18/linux-2.6-net-bluetooth-fix-possible-info-leak-in-bt_sock_recvmsg.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-3235
- Description:
Kernel: tipc: info leaks via msg_name in recv_msg/recv_stream
- CVE: https://access.redhat.com/security/cve/CVE-2013-3235
- Patch: 2.6.18/for-274/linux-2.6-net-tipc-fix-info-leaks-via-msg_name-in-recv_msg-recv_stream.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2012-6544
- Description:
Kernel: Bluetooth: HCI & L2CAP information leaks
- CVE: https://access.redhat.com/security/cve/CVE-2012-6544
- Patch: 2.6.18/linux-2.6-net-bluetooth-hci-l2cap-information-leaks.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-0914
- Description:
Kernel: sa_restorer information leak
- CVE: https://access.redhat.com/security/cve/CVE-2013-0914
- Patch: 2.6.18/linux-2.6-misc-signal-always-clear-sa_restorer-on-execve.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-0914
- Description:
Kernel: sa_restorer information leak
- CVE: https://access.redhat.com/security/cve/CVE-2013-0914
- Patch: 2.6.18/linux-2.6-misc-signal-def-__arch_has_sa_restorer-for-sa_restorer-clear.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-0914
- Description:
Kernel: sa_restorer information leak
- CVE: https://access.redhat.com/security/cve/CVE-2013-0914
- Patch: 2.6.18/linux-2.6-misc-signal-use-__arch_has_sa_restorer-instead-of-sa_restorer.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-3231
- Description:
Kernel: llc: Fix missing msg_namelen update in llc_ui_recvmsg
- CVE: https://access.redhat.com/security/cve/CVE-2013-3231
- Patch: 2.6.18/linux-2.6-net-llc-fix-missing-msg_namelen-update-in-llc_ui_recvmsg.patch
- From: kernel-2.6.18-348.12.1.el5
- CVE-2013-2147
- Description:
Kernel: cpqarray/cciss: information leak via ioctl
- CVE: https://access.redhat.com/security/cve/CVE-2013-2147
- Patch: 2.6.18/linux-2.6-block-cpqarray-info-leak-in-ida_locked_ioctl.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2164
- Description:
Kernel: information leak in cdrom driver
- CVE: https://access.redhat.com/security/cve/CVE-2013-2164
- Patch: 2.6.18/linux-2.6-block-cdrom-use-kzalloc-for-failing-hardware.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2237
- Description:
Kernel: net: af_key: initialize satype in key_notify_policy_flush
- CVE: https://access.redhat.com/security/cve/CVE-2013-2237
- Patch: 2.6.18/linux-2.6-net-af_key-initialize-satype-in-key_notify_policy_flush.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2234
- Description:
Kernel: net: information leak in AF_KEY notify
- CVE: https://access.redhat.com/security/cve/CVE-2013-2234
- Patch: 2.6.18/linux-2.6-net-af_key-fix-info-leaks-in-notify-messages.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2232
- Description:
Kernel: ipv6: using ipv4 vs ipv6 structure during routing lookup in sendmsg
- CVE: https://access.redhat.com/security/cve/CVE-2013-2232
- Patch: 2.6.18/linux-2.6-net-ipv6-ip6_sk_dst_check-must-not-assume-ipv6-dst.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2206
- Description:
kernel: sctp: duplicate cookie handling NULL pointer dereference
- CVE: https://access.redhat.com/security/cve/CVE-2013-2206
- Patch: 2.6.18/linux-2.6-net-sctp-deal-with-multiple-cookie_echo-chunks.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2206
- Description:
kernel: sctp: duplicate cookie handling NULL pointer dereference
- CVE: https://access.redhat.com/security/cve/CVE-2013-2206
- Patch: 2.6.18/linux-2.6-net-sctp-use-correct-sideffect-command-in-dup-cookie-handling.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2013-2206
- Description:
kernel: sctp: duplicate cookie handling NULL pointer dereference
- CVE: https://access.redhat.com/security/cve/CVE-2013-2206
- Patch: 2.6.18/linux-2.6-net-sctp-disallow-new-connection-on-a-closing-socket.patch
- From: kernel-2.6.18-348.16.1.el5
- CVE-2012-3511
- Description:
kernel: mm: use-after-free in madvise_remove()
- CVE: https://access.redhat.com/security/cve/CVE-2012-3511
- Patch: 2.6.18/linux-2.6-mm-use-after-free-in-madvise_remove.patch
- From: kernel-2.6.18-348.18.1.el5
- CVE-2013-2141
- Description:
Kernel: signal: information leak in tkill/tgkill
- CVE: https://access.redhat.com/security/cve/CVE-2013-2141
- Patch: 2.6.18/linux-2.6-kernel-signals-stop-info-leak-via-tkill-and-tgkill-syscalls.patch
- From: kernel-2.6.18-348.18.1.el5
- CVE-2013-4162
- Description:
Kernel: net: panic while pushing pending data out of a IPv6 socket with UDP_CORK
- CVE: https://access.redhat.com/security/cve/CVE-2013-4162
- Patch: 2.6.18/linux-2.6-net-ipv6-do-udp_push_pending_frames-af_inet-sock-pending-data.patch
- From: kernel-2.6.18-348.18.1.el5
- CVE-2012-4398
- Description:
kernel: request_module() OOM local DoS
- CVE: https://access.redhat.com/security/cve/CVE-2012-4398
- Patch: 2.6.18/linux-2.6-kernel-kmod-make-request_module-killable.patch
- From: kernel-2.6.18-371.el5
- CVE-2012-4398
- Description:
kernel: request_module() OOM local DoS
- CVE: https://access.redhat.com/security/cve/CVE-2012-4398
- Patch: 2.6.18/linux-2.6-kernel-kmod-avoid-deadlock-from-recursive-kmod-call.patch
- From: kernel-2.6.18-371.el5
- CVE-2012-4398
- Description:
kernel: request_module() OOM local DoS
- CVE: https://access.redhat.com/security/cve/CVE-2012-4398
- Patch: 2.6.18/linux-2.6-kernel-wait_for_helper-remove-unneeded-do_sigaction.patch
- From: kernel-2.6.18-371.el5
- CVE-2012-4398
- Description:
kernel: request_module() OOM local DoS
- CVE: https://access.redhat.com/security/cve/CVE-2012-4398
- Patch: 2.6.18/linux-2.6-kernel-fix-____call_usermodehelper-errs-being-silently-ignored.patch
- From: kernel-2.6.18-371.el5
- CVE-2012-4398
- Description:
kernel: request_module() OOM local DoS
- CVE: https://access.redhat.com/security/cve/CVE-2012-4398
- Patch: 2.6.18/linux-2.6-kernel-wait_for_helper-sigchld-from-u-s-cause-use-after-free.patch
- From: kernel-2.6.18-371.el5
- CVE-2013-4299
- Description:
kernel: dm: dm-snapshot data leak
- CVE: https://access.redhat.com/security/cve/CVE-2013-4299
- Patch: 2.6.18/linux-2.6-md-dm-snapshot-fix-data-corruption.patch
- From: kernel-2.6.18-371.1.2.el5
- CVE-2013-4345
- Description:
kernel: ansi_cprng: off by one error in non-block size request
- CVE: https://access.redhat.com/security/cve/CVE-2013-4345
- Patch: 2.6.18/linux-2.6-crypto-ansi_cprng-fix-off-by-one-err-in-non-block-size-request.patch
- From: kernel-2.6.18-371.1.2.el5
- CVE-2013-2929
- Description:
exec/ptrace: fix get_dumpable() incorrect tests
- CVE: https://access.redhat.com/security/cve/CVE-2013-2929
- Patch: 2.6.18/linux-2.6-fs-exec-ptrace-fix-get_dumpable-incorrect-tests.patch
- From: kernel-2.6.18-371.6.1.el5
- CVE-2013-7263
- Description:
inet: prevent leakage of uninitialized memory to user in recv syscalls
- CVE: https://access.redhat.com/security/cve/CVE-2013-7263
- Patch: 2.6.18/linux-2.6-net-prevent-leakage-of-uninitialized-memory-to-user-in-recv.patch
- From: kernel-2.6.18-371.6.1.el5
- CVE-2013-7263
- Description:
inet: fix addr_len/msg->msg_namelen assignment in recv_error functions
- CVE: https://access.redhat.com/security/cve/CVE-2013-7263
- Patch: 2.6.18/linux-2.6-net-fix-addr_len-msg-msg_namelen-assign-in-recv_error-funcs.patch
- From: kernel-2.6.18-371.6.1.el5
- CVE-2013-7263
- Description:
ipv6: fix leaking uninitialized port number of offender sockaddr
- CVE: https://access.redhat.com/security/cve/CVE-2013-7263
- Patch: 2.6.18/linux-2.6-net-ipv6-fix-leaking-uninit-port-number-of-offender-sockaddr.patch
- From: kernel-2.6.18-371.6.1.el5
- CVE-2013-6381
- Description:
qeth: buffer overflow in snmp ioctl
- CVE: https://access.redhat.com/security/cve/CVE-2013-6381
- Patch: 2.6.18/linux-2.6-s390-qeth-buffer-overflow-in-snmp-ioctl.patch
- From: kernel-2.6.18-371.6.1.el5
- CVE-2013-4483
- Description:
ipc,sem: change refcount to atomic_t
- CVE: https://access.redhat.com/security/cve/CVE-2013-4483
- Patch: 2.6.18/linux-2.6-ipc-change-refcount-to-atomic_t.patch
- From: kernel-2.6.18-371.6.1.el5
- CVE-2012-6638
- Description:
net ipv4: don't call conn_request() if the TCP flags includes SYN flag
- CVE: https://access.redhat.com/security/cve/CVE-2012-6638
- Patch: 2.6.18/linux-2.6-net-tcp-drop-SYNFIN-messages.patch
- From: kernel-2.6.18-371.8.1.el5
- CVE-2013-2888
- Description:
Kernel: HID: memory corruption flaw
- CVE: https://access.redhat.com/security/cve/CVE-2013-2888
- Patch: 2.6.18/linux-2.6-hid-memory-corruption-flaw.patch
- From: kernel-2.6.18-371.8.1.el5
- CVE-2014-1738
- Description:
floppy: don't write kernel-only members to FDRAWCMD ioctl output
- CVE: https://access.redhat.com/security/cve/CVE-2014-1738
- Patch: 2.6.18/linux-2.6-floppy-dont-write-kernel-only-members-to-FDRAWCMD-ioctl-input.patch
- From: kernel-2.6.18-371.9.1.el5
- CVE-2014-1737
- Description:
floppy: ignore kernel-only members in FDRAWCMD ioctl input
- CVE: https://access.redhat.com/security/cve/CVE-2014-1737
- Patch: 2.6.18/linux-2.6-floppy-ignore-kernel-only-members-in-FDRAWCMD-ioctl-input.patch
- From: kernel-2.6.18-371.9.1.el5
- CVE-2013-7339
- Description:
rds: prevent dereference of a NULL device
- CVE: https://access.redhat.com/security/cve/CVE-2013-7339
- Patch: 2.6.18/linux-2.6-rds-prevent-dereference-of-a-NULL-device.patch
- From: kernel-2.6.18-371.9.1.el5
- CVE-2014-4699
- Description:
kernel: ptrace,x86: force IRET path after a ptrace_stop().
- CVE: https://security-tracker.debian.org/tracker/CVE-2014-4699
- Patch: 2.6.18/linux-2.6-ptrace-bugfix-CVE-2014-4699.patch
- From: >kernel-2.6.32-431.20.3el6
- CVE-2014-2678
- Description:
kernel: rds: prevent dereference of a NULL device in rds_iw_laddr_check
- CVE: https://access.redhat.com/security/cve/CVE-2014-2678
- Patch: 2.6.18/linux-2.6-rds-prevent-dereference-of-a-NULL-device-in-rds_iw_laddr_check.patch
- From: kernel-2.6.18-371.11.1.el5
- CVE-2014-3917
- Description:
auditsc: audit_krule mask accesses need bounds checking
- CVE: https://access.redhat.com/security/cve/CVE-2014-3917
- Patch: 2.6.18/auditsc_audit_krule_mask_accesses_need_bounds_checking.patch
- From: kernel-2.6.18-371.12.1.el5
- CVE-2014-8159
- Description:
[infiniband] core: Prevent integer overflow in ib_umem_get
- CVE: https://access.redhat.com/security/cve/CVE-2014-8159
- Patch: 2.6.18/for-308/linux-2.6-infiniband-core-Prevent-integer-overflow-in-ib_umem_get.patch
- From: kernel-2.6.18-404.el5
- CVE-2015-1805
- Description:
kernel: pipe: iovec overrun leading to memory corruption
- CVE: https://access.redhat.com/security/cve/CVE-2015-1805
- Patch: 2.6.18/CVE-2015-1805.patch
- From: kernel-2.6.18-406.el5
- CVE-2015-5364 CVE-2015-5366
- Description:
kernel: net: incorrect processing of checksums in UDP implementation
- CVE: https://access.redhat.com/security/cve/CVE-2015-5366
- Patch: 2.6.18/udp-fix-behavior-of-wrong-checksums.patch
- From: >kernel-2.6.18-406.el5
- CVE-2016-5195
- Description:
CVE-2016-5195 fix
- CVE: https://access.redhat.com/security/cve/CVE-2016-5195
- Patch: 2.6.18/CVE-2016-5195.patch
- From: kernel-2.6.18-412.el5
- CVE-2017-6074
- Description:
dccp: fix freeing skb too early for IPV6_RECVPKTINFO
- CVE: https://access.redhat.com/security/cve/CVE-2017-6074
- Patch: 2.6.18/dccp-fix-freeing-skb-too-early-for-ipv6_recvpktinfo.patch
- From: kernel-2.6.18-419.el5
- CVE-2017-2634
- Description:
DCCP: Use AF-independent rebuild_header routine
- CVE: https://access.redhat.com/security/cve/CVE-2017-2634
- Patch: 2.6.18/dccp-use-af-independent-rebuild_header-routine.patch
- From: kernel-2.6.18-419.el5