ID de Prueba:	1.3.6.1.4.1.25623.1.0.871184
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for kernel RHSA-2014:0678-02
Resumen:	The remote host is missing an update for the 'kernel'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel' package(s) announced via the referenced advisory. Vulnerability Insight: The kernel packages contain the Linux kernel, the core of any Linux operating system. * A race condition flaw, leading to heap-based buffer overflows, was found in the way the Linux kernel's N_TTY line discipline (LDISC) implementation handled concurrent processing of echo output and TTY write operations originating from user space when the underlying TTY driver was PTY. An unprivileged, local user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2014-0196, Important) All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect. Affected Software/OS: kernel on Red Hat Enterprise Linux Server (v. 7) Solution: Please Install the Updated Packages. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0196 Debian Security Information: DSA-2926 (Google Search) http://www.debian.org/security/2014/dsa-2926 Debian Security Information: DSA-2928 (Google Search) http://www.debian.org/security/2014/dsa-2928 http://www.exploit-db.com/exploits/33516 http://pastebin.com/raw.php?i=yTSFUBgZ http://www.openwall.com/lists/oss-security/2014/05/05/6 http://www.osvdb.org/106646 RedHat Security Advisories: RHSA-2014:0512 http://rhn.redhat.com/errata/RHSA-2014-0512.html http://secunia.com/advisories/59218 http://secunia.com/advisories/59262 http://secunia.com/advisories/59599 SuSE Security Announcement: SUSE-SU-2014:0667 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.html SuSE Security Announcement: SUSE-SU-2014:0683 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.html http://www.ubuntu.com/usn/USN-2196-1 http://www.ubuntu.com/usn/USN-2197-1 http://www.ubuntu.com/usn/USN-2198-1 http://www.ubuntu.com/usn/USN-2199-1 http://www.ubuntu.com/usn/USN-2200-1 http://www.ubuntu.com/usn/USN-2201-1 http://www.ubuntu.com/usn/USN-2202-1 http://www.ubuntu.com/usn/USN-2203-1 http://www.ubuntu.com/usn/USN-2204-1
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.