Test ID:	1.3.6.1.4.1.25623.1.0.64796
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:1243
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:1243.;;The kernel packages contain the Linux kernel, the core of any Linux;operating system.;;These updated packages fix the following security issues:;; * it was discovered that, when executing a new process, the clear_child_tid;pointer in the Linux kernel is not cleared. If this pointer points to a;writable portion of the memory of the new program, the kernel could corrupt;four bytes of memory, possibly leading to a local denial of service or;privilege escalation. (CVE-2009-2848, Important);; * a flaw was found in the way the do_sigaltstack() function in the Linux;kernel copies the stack_t structure to user-space. On 64-bit machines, this;flaw could lead to a four-byte information leak. (CVE-2009-2847, Moderate);; * a flaw was found in the ext4 file system code. A local attacker could use;this flaw to cause a denial of service by performing a resize operation on;a specially-crafted ext4 file system. (CVE-2009-0745, Low);; * multiple flaws were found in the ext4 file system code. A local attacker;could use these flaws to cause a denial of service by mounting a;specially-crafted ext4 file system. (CVE-2009-0746, CVE-2009-0747,;CVE-2009-0748, Low);;These updated packages also include several hundred bug fixes for and;enhancements to the Linux kernel. Space precludes documenting each of these;changes in this advisory and users are directed to the Red Hat Enterprise;Linux 5.4 Release Notes for information on the most significant of these;changes:;;;Also, for details concerning every bug fixed in and every enhancement added;to the kernel for this release, see the kernel chapter in the Red Hat;Enterprise Linux 5.4 Technical Notes.;;All Red Hat Enterprise Linux 5 users are advised to install these updated;packages, which address these vulnerabilities as well as fixing the bugs;and adding the enhancements noted in the Red Hat Enterprise Linux 5.4;Release Notes and Technical Notes. The system must be rebooted for this;update to take effect.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1243. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: * it was discovered that, when executing a new process, the clear_child_tid pointer in the Linux kernel is not cleared. If this pointer points to a writable portion of the memory of the new program, the kernel could corrupt four bytes of memory, possibly leading to a local denial of service or privilege escalation. (CVE-2009-2848, Important) * a flaw was found in the way the do_sigaltstack() function in the Linux kernel copies the stack_t structure to user-space. On 64-bit machines, this flaw could lead to a four-byte information leak. (CVE-2009-2847, Moderate) * a flaw was found in the ext4 file system code. A local attacker could use this flaw to cause a denial of service by performing a resize operation on a specially-crafted ext4 file system. (CVE-2009-0745, Low) * multiple flaws were found in the ext4 file system code. A local attacker could use these flaws to cause a denial of service by mounting a specially-crafted ext4 file system. (CVE-2009-0746, CVE-2009-0747, CVE-2009-0748, Low) These updated packages also include several hundred bug fixes for and enhancements to the Linux kernel. Space precludes documenting each of these changes in this advisory and users are directed to the Red Hat Enterprise Linux 5.4 Release Notes for information on the most significant of these changes: Also, for details concerning every bug fixed in and every enhancement added to the kernel for this release, see the kernel chapter in the Red Hat Enterprise Linux 5.4 Technical Notes. All Red Hat Enterprise Linux 5 users are advised to install these updated packages, which address these vulnerabilities as well as fixing the bugs and adding the enhancements noted in the Red Hat Enterprise Linux 5.4 Release Notes and Technical Notes. The system must be rebooted for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date. CVSS Score: 5.9 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0745 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/507985/100/0/threaded Debian Security Information: DSA-1749 (Google Search) http://www.debian.org/security/2009/dsa-1749 Debian Security Information: DSA-1787 (Google Search) http://www.debian.org/security/2009/dsa-1787 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765 RedHat Security Advisories: RHSA-2009:1243 http://rhn.redhat.com/errata/RHSA-2009-1243.html http://secunia.com/advisories/34394 http://secunia.com/advisories/34981 http://secunia.com/advisories/36562 http://secunia.com/advisories/37471 http://www.ubuntu.com/usn/usn-751-1 http://www.vupen.com/english/advisories/2009/0509 http://www.vupen.com/english/advisories/2009/3316 Common Vulnerability Exposure (CVE) ID: CVE-2009-0746 http://osvdb.org/52202 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039 XForce ISS Database: linux-kernel-makeindexeddir-ext4-dos(48872) https://exchange.xforce.ibmcloud.com/vulnerabilities/48872 Common Vulnerability Exposure (CVE) ID: CVE-2009-0747 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200 Common Vulnerability Exposure (CVE) ID: CVE-2009-0748 http://osvdb.org/52203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526 Common Vulnerability Exposure (CVE) ID: CVE-2009-2847 http://www.exploit-db.com/exploits/9352 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html http://www.openwall.com/lists/oss-security/2009/08/04/1 http://www.openwall.com/lists/oss-security/2009/08/05/1 http://www.openwall.com/lists/oss-security/2009/08/26/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10637 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8405 http://www.redhat.com/support/errata/RHSA-2009-1438.html http://secunia.com/advisories/36136 http://secunia.com/advisories/36501 http://secunia.com/advisories/36759 http://secunia.com/advisories/37105 http://www.ubuntu.com/usn/USN-852-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-2848 Bugtraq: 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel (Google Search) http://www.securityfocus.com/archive/1/512019/100/0/threaded http://article.gmane.org/gmane.linux.kernel/871942 http://www.openwall.com/lists/oss-security/2009/08/04/2 http://www.openwall.com/lists/oss-security/2009/08/05/10 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766 RedHat Security Advisories: RHSA-2009:1550 https://rhn.redhat.com/errata/RHSA-2009-1550.html http://secunia.com/advisories/35983 http://secunia.com/advisories/37351 SuSE Security Announcement: SUSE-SA:2009:054 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html SuSE Security Announcement: SUSE-SA:2009:056 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html SuSE Security Announcement: SUSE-SA:2010:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html XForce ISS Database: kernel-execve-dos(52899) https://exchange.xforce.ibmcloud.com/vulnerabilities/52899
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.