Advisories:rPSA-2007-0245

From rPath Wiki

rPath Security Advisory 2007-0245-3

Published: 2007-11-21

Updated

1. 2007-11-21 Correct version string for rap.rpath.com@rpath:linux-1
2. 2007-11-21 Added kernel=conary.rpath.com@rpl:1-vmware to advisory text

Products

• rPath Linux 1
• rPath Appliance Platform Linux Service 1

Rating

Severe

Exposure Level Classification

Remote User Deterministic Denial of Service

Updated Versions

• kernel=conary.rpath.com@rpl:1/2.6.22.13-0.2-1
• kernel=conary.rpath.com@rpl:1-vmware/2.6.22.13-0.1-1
• kernel=rap.rpath.com@rpath:linux-1/2.6.22.13-1-1

rPath Issue Tracking System

• RPL-1929
• RPL-1965

References

• CVE-2006-6058
• CVE-2007-5500
• CVE-2007-5501

Description

Previous versions of the kernel package have several vulnerabilities

resolved in this release. The most severe is a remotely triggerable

denial of service via carefully crafted TCP ACK packets. The other

vulnerabilities are denials of service that require local system

access; one applies only when mounting minix filesystems, the other

applies to certain process-exit conditions.

A system reboot is required to resolve these vulnerabilities.

Copyright 2007 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html