[SUSE-SU-2017:0772-1] Security update for Linux Kernel Live Patch 17 for SLE 12

Severity Important
Affected Packages 2
CVEs 1

Security update for Linux Kernel Live Patch 17 for SLE 12

This update for the Linux Kernel 3.12.60-52_60 fixes one issue.

The following security bug was fixed:

  • CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bsc#1025013).
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/kgraft-patch-3_12_60-52_60-xen?arch=x86_64&distro=sles-12 suse kgraft-patch-3_12_60-52_60-xen < 3-2.1 sles-12 x86_64
Affected pkg:rpm/suse/kgraft-patch-3_12_60-52_60-default?arch=x86_64&distro=sles-12 suse kgraft-patch-3_12_60-52_60-default < 3-2.1 sles-12 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...