[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250053

 
 

909

 
 

195940

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2LIVEPATCH-2024-165 --- kernel-livepatch-4.14.336-253.554

ID: oval:org.secpod.oval:def:1702148Date: (C)2024-02-28   (M)2024-04-29
Class: PATCHFamily: unix




An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 ; While creating a new netfilter table, lack of a safeguard against invalid nf_tables family values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access. In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access

Platform:
Amazon Linux 2
Product:
kernel-livepatch-4.14.336-253.554
Reference:
ALAS2LIVEPATCH-2024-165
CVE-2023-6040
CVE-2024-23849
CVE    2
CVE-2023-6040
CVE-2024-23849
CPE    1
cpe:/o:amazon:linux:2

© SecPod Technologies