Test Kennung:	1.3.6.1.4.1.25623.1.0.66898
Kategorie:	Fedora Local Security Checks
Titel:	Fedora Core 11 FEDORA-2010-1500 (kernel)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to kernel announced via advisory FEDORA-2010-1500. Update Information: Kernel security update for Fedora 11: CVE-2009-4141 CVE-2009-4536 CVE-2009-4537 CVE-2009-4538 CVE-2010-0307 Bugs: 559100 kernel: tty->pgrp races 521265 oops in VIA padlock driver References: [ 1 ] Bug #560547 - CVE-2010-0307 kernel: DoS on x86_64 https://bugzilla.redhat.com/show_bug.cgi?id=560547 [ 2 ] Bug #559100 - kernel: tty->pgrp races https://bugzilla.redhat.com/show_bug.cgi?id=559100 [ 3 ] Bug #550907 - CVE-2009-4537 kernel: r8169 issue reported at 26c3 https://bugzilla.redhat.com/show_bug.cgi?id=550907 [ 4 ] Bug #552126 - CVE-2009-4536 kernel: e1000 issue reported at 26c3 https://bugzilla.redhat.com/show_bug.cgi?id=552126 [ 5 ] Bug #551214 - CVE-2009-4538 kernel: e1000e frame fragment issue https://bugzilla.redhat.com/show_bug.cgi?id=551214 [ 6 ] Bug #547906 - CVE-2009-4141 kernel: create_elf_tables can leave urandom in a bad state https://bugzilla.redhat.com/show_bug.cgi?id=547906 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update kernel' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2010-1500 Risk factor : Critical CVSS Score: 10.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4141 BugTraq ID: 37806 http://www.securityfocus.com/bid/37806 http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0252.html http://lock.cmpxchg8b.com/5ebe2294ecd0e0f08eab7690d2a6ee69/create_elf_tables.c http://twitter.com/taviso/statuses/7744108017 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7054 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9201 RedHat Security Advisories: RHSA-2010:0046 https://rhn.redhat.com/errata/RHSA-2010-0046.html RedHat Security Advisories: RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://www.redhat.com/support/errata/RHSA-2010-0161.html http://secunia.com/advisories/38199 http://secunia.com/advisories/39033 SuSE Security Announcement: SUSE-SA:2010:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2009-4536 BugTraq ID: 37519 http://www.securityfocus.com/bid/37519 Debian Security Information: DSA-1996 (Google Search) http://www.debian.org/security/2010/dsa-1996 Debian Security Information: DSA-2005 (Google Search) http://www.debian.org/security/2010/dsa-2005 http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html http://blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/ http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html http://www.openwall.com/lists/oss-security/2009/12/28/1 http://www.openwall.com/lists/oss-security/2009/12/29/2 http://www.openwall.com/lists/oss-security/2009/12/31/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10607 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12440 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13226 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7453 http://www.redhat.com/support/errata/RHSA-2010-0019.html http://www.redhat.com/support/errata/RHSA-2010-0020.html http://www.redhat.com/support/errata/RHSA-2010-0041.html http://www.redhat.com/support/errata/RHSA-2010-0053.html http://www.redhat.com/support/errata/RHSA-2010-0111.html http://www.redhat.com/support/errata/RHSA-2010-0882.html http://securitytracker.com/id?1023420 http://secunia.com/advisories/35265 http://secunia.com/advisories/38031 http://secunia.com/advisories/38276 http://secunia.com/advisories/38296 http://secunia.com/advisories/38492 http://secunia.com/advisories/38610 http://secunia.com/advisories/38779 SuSE Security Announcement: SUSE-SA:2010:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html SuSE Security Announcement: SUSE-SA:2010:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html SuSE Security Announcement: SUSE-SA:2010:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html SuSE Security Announcement: SUSE-SA:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html SuSE Security Announcement: SUSE-SA:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html XForce ISS Database: kernel-e1000main-security-bypass(55648) https://exchange.xforce.ibmcloud.com/vulnerabilities/55648 Common Vulnerability Exposure (CVE) ID: CVE-2009-4537 BugTraq ID: 37521 http://www.securityfocus.com/bid/37521 Debian Security Information: DSA-2053 (Google Search) http://www.debian.org/security/2010/dsa-2053 http://twitter.com/dakami/statuses/7104238406 http://marc.info/?l=linux-netdev&m=126202972828626&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7443 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9439 http://securitytracker.com/id?1023419 http://secunia.com/advisories/39742 http://secunia.com/advisories/39830 http://secunia.com/advisories/40645 SuSE Security Announcement: SUSE-SA:2010:023 (Google Search) http://www.novell.com/linux/security/advisories/2010_23_kernel.html SuSE Security Announcement: SUSE-SA:2010:031 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html http://www.vupen.com/english/advisories/2010/1857 XForce ISS Database: kernel-r8169-dos(55647) https://exchange.xforce.ibmcloud.com/vulnerabilities/55647 Common Vulnerability Exposure (CVE) ID: CVE-2009-4538 BugTraq ID: 37523 http://www.securityfocus.com/bid/37523 http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7016 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9702 XForce ISS Database: kernel-edriver-unspecified(55645) https://exchange.xforce.ibmcloud.com/vulnerabilities/55645 Common Vulnerability Exposure (CVE) ID: CVE-2010-0307 BugTraq ID: 38027 http://www.securityfocus.com/bid/38027 Bugtraq: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (Google Search) http://www.securityfocus.com/archive/1/516397/100/0/threaded http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of,20100202,15754.html http://marc.info/?l=linux-mm&m=126466407724382&w=2 http://www.openwall.com/lists/oss-security/2010/02/01/1 http://www.openwall.com/lists/oss-security/2010/02/01/5 http://www.openwall.com/lists/oss-security/2010/02/04/1 http://www.openwall.com/lists/oss-security/2010/02/04/9 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10870 RedHat Security Advisories: RHSA-2010:0146 https://rhn.redhat.com/errata/RHSA-2010-0146.html http://www.redhat.com/support/errata/RHSA-2010-0398.html http://www.redhat.com/support/errata/RHSA-2010-0771.html http://secunia.com/advisories/38922 http://secunia.com/advisories/39649 http://secunia.com/advisories/43315 http://www.ubuntu.com/usn/USN-914-1 http://www.vupen.com/english/advisories/2010/0638 Common Vulnerability Exposure (CVE) ID: CVE-2010-0003 BugTraq ID: 37724 http://www.securityfocus.com/bid/37724 http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html http://www.openwall.com/lists/oss-security/2010/01/12/1 http://www.openwall.com/lists/oss-security/2010/01/13/4 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10550 http://www.redhat.com/support/errata/RHSA-2010-0147.html http://secunia.com/advisories/38333 Common Vulnerability Exposure (CVE) ID: CVE-2010-0007 BugTraq ID: 37762 http://www.securityfocus.com/bid/37762 http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 http://www.openwall.com/lists/oss-security/2010/01/14/1 http://www.openwall.com/lists/oss-security/2010/01/14/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9630 http://secunia.com/advisories/38133 http://www.vupen.com/english/advisories/2010/0109 XForce ISS Database: kernel-ebtables-security-bypass(55602) https://exchange.xforce.ibmcloud.com/vulnerabilities/55602 Common Vulnerability Exposure (CVE) ID: CVE-2010-0006 BugTraq ID: 37810 http://www.securityfocus.com/bid/37810 http://cert.fi/en/reports/2010/vulnerability341748.html http://marc.info/?l=linux-netdev&m=126343325807340&w=2 http://www.openwall.com/lists/oss-security/2010/01/14/2 http://www.osvdb.org/61876 http://secunia.com/advisories/38168 Common Vulnerability Exposure (CVE) ID: CVE-2009-3547 BugTraq ID: 36901 http://www.securityfocus.com/bid/36901 Bugtraq: 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel (Google Search) http://www.securityfocus.com/archive/1/512019/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 http://lkml.org/lkml/2009/10/14/184 http://lkml.org/lkml/2009/10/21/42 http://marc.info/?l=oss-security&m=125724568017045&w=2 http://lists.vmware.com/pipermail/security-announce/2010/000082.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327 RedHat Security Advisories: RHSA-2009:1540 https://rhn.redhat.com/errata/RHSA-2009-1540.html RedHat Security Advisories: RHSA-2009:1541 https://rhn.redhat.com/errata/RHSA-2009-1541.html RedHat Security Advisories: RHSA-2009:1548 https://rhn.redhat.com/errata/RHSA-2009-1548.html RedHat Security Advisories: RHSA-2009:1550 https://rhn.redhat.com/errata/RHSA-2009-1550.html http://www.redhat.com/support/errata/RHSA-2009-1672.html http://secunia.com/advisories/37351 http://secunia.com/advisories/38017 http://secunia.com/advisories/38794 http://secunia.com/advisories/38834 SuSE Security Announcement: SUSE-SA:2009:054 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html SuSE Security Announcement: SUSE-SA:2009:056 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html SuSE Security Announcement: SUSE-SA:2010:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html http://www.ubuntu.com/usn/usn-864-1 http://www.vupen.com/english/advisories/2010/0528 Common Vulnerability Exposure (CVE) ID: CVE-2009-3638 BugTraq ID: 36803 http://www.securityfocus.com/bid/36803 http://marc.info/?l=oss-security&m=125628917011048&w=2 http://marc.info/?l=oss-security&m=125632898507373&w=2 XForce ISS Database: linux-kernel-supportedcpuid-code-execution(53934) https://exchange.xforce.ibmcloud.com/vulnerabilities/53934 Common Vulnerability Exposure (CVE) ID: CVE-2009-3624 http://twitter.com/spendergrsec/statuses/4916661870 http://marc.info/?l=oss-security&m=125619420905341&w=2 http://marc.info/?l=oss-security&m=125624091417161&w=2 http://secunia.com/advisories/37086 Common Vulnerability Exposure (CVE) ID: CVE-2009-3621 http://lkml.org/lkml/2009/10/19/50 http://www.openwall.com/lists/oss-security/2009/10/19/2 http://www.openwall.com/lists/oss-security/2009/10/19/4 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921 http://www.redhat.com/support/errata/RHSA-2009-1670.html http://www.redhat.com/support/errata/RHSA-2009-1671.html http://secunia.com/advisories/37909 SuSE Security Announcement: SUSE-SA:2009:061 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html SuSE Security Announcement: SUSE-SA:2009:064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2009-3620 BugTraq ID: 36824 http://www.securityfocus.com/bid/36824 http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 http://article.gmane.org/gmane.linux.kernel/892259 http://www.openwall.com/lists/oss-security/2009/10/19/1 http://www.openwall.com/lists/oss-security/2009/10/19/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6763 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9891 http://secunia.com/advisories/36707 Common Vulnerability Exposure (CVE) ID: CVE-2009-3612 http://www.openwall.com/lists/oss-security/2009/10/14/2 http://www.openwall.com/lists/oss-security/2009/10/15/1 http://www.openwall.com/lists/oss-security/2009/10/14/1 http://www.openwall.com/lists/oss-security/2009/10/15/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557 Common Vulnerability Exposure (CVE) ID: CVE-2009-2909 BugTraq ID: 36635 http://www.securityfocus.com/bid/36635 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html http://article.gmane.org/gmane.linux.kernel/896907 http://marc.info/?l=oss-security&m=125494119617994&w=2 http://secunia.com/advisories/37075 Common Vulnerability Exposure (CVE) ID: CVE-2009-2908 BugTraq ID: 36639 http://www.securityfocus.com/bid/36639 https://bugs.launchpad.net/ecryptfs/+bug/387073 http://www.openwall.com/lists/oss-security/2009/10/06/1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992 http://secunia.com/advisories/37105 http://www.ubuntu.com/usn/USN-852-1 XForce ISS Database: kernel-ecryptfs-dos(53693) https://exchange.xforce.ibmcloud.com/vulnerabilities/53693 Common Vulnerability Exposure (CVE) ID: CVE-2009-2903 BugTraq ID: 36379 http://www.securityfocus.com/bid/36379 http://www.openwall.com/lists/oss-security/2009/09/14/1 http://www.openwall.com/lists/oss-security/2009/09/14/2 http://www.openwall.com/lists/oss-security/2009/09/17/11 Common Vulnerability Exposure (CVE) ID: CVE-2009-3290 http://www.openwall.com/lists/oss-security/2009/09/18/1 http://www.openwall.com/lists/oss-security/2009/09/21/1 http://www.openwall.com/lists/oss-security/2009/09/22/8 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11328 http://www.redhat.com/support/errata/RHSA-2009-1465.html Common Vulnerability Exposure (CVE) ID: CVE-2009-2847 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded http://www.exploit-db.com/exploits/9352 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html http://www.openwall.com/lists/oss-security/2009/08/04/1 http://www.openwall.com/lists/oss-security/2009/08/05/1 http://www.openwall.com/lists/oss-security/2009/08/26/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405 RedHat Security Advisories: RHSA-2009:1243 http://rhn.redhat.com/errata/RHSA-2009-1243.html http://www.redhat.com/support/errata/RHSA-2009-1438.html http://secunia.com/advisories/36136 http://secunia.com/advisories/36501 http://secunia.com/advisories/36562 http://secunia.com/advisories/36759 http://secunia.com/advisories/37471 http://www.vupen.com/english/advisories/2009/3316
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.