Test ID:	1.3.6.1.4.1.25623.1.0.68062
Category:	Fedora Local Security Checks
Title:	Fedora Core 13 FEDORA-2010-14890 (kernel)
Summary:	Fedora Core 13 FEDORA-2010-14890 (kernel)
Description:	The remote host is missing an update to the kernel announced via advisory FEDORA-2010-14890. Update Information: - Fix possible local privilege escalation on x86_64 systems (CVE-2010-3081, CVE-2010-3301). - Mitigate denial of service attack with large argument lists. - Fix possible hang on suspend introduced in 2.6.34.6-54 References: [ 1 ] Bug #631623 - CVE-2010-3079 kernel: ftrace NULL ptr deref https://bugzilla.redhat.com/show_bug.cgi?id=631623 [ 2 ] Bug #630551 - CVE-2010-3080 kernel: /dev/sequencer open failure is not handled correctly https://bugzilla.redhat.com/show_bug.cgi?id=630551 [ 3 ] Bug #634457 - CVE-2010-3081 kernel: 64-bit Compatibility Mode Stack Pointer Underflow https://bugzilla.redhat.com/show_bug.cgi?id=634457 [ 4 ] Bug #634449 - CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=634449 [ 5 ] Bug #628770 - CVE-2010-2954 kernel: NULL deref and panic in irda https://bugzilla.redhat.com/show_bug.cgi?id=628770 [ 6 ] Bug #627440 - CVE-2010-2960 keyctl_session_to_parent NULL deref system crash https://bugzilla.redhat.com/show_bug.cgi?id=627440 [ 7 ] Bug #629441 - CVE-2010-3067 kernel: do_io_submit() issues https://bugzilla.redhat.com/show_bug.cgi?id=629441 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update kernel' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2010-14890 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3081 Bugtraq: 20101130 VMSA-2010-0017 VMware ESX third party update for Service Console kerne (Google Search) http://www.securityfocus.com/archive/1/514938/30/30/threaded Bugtraq: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (Google Search) http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0273.html http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0278.html http://marc.info/?l=oss-security&m=128461522230211&w=2 http://blog.ksplice.com/2010/09/cve-2010-3081/ http://isc.sans.edu/diary.html?storyid=9574 http://sota.gen.nz/compat1/ http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 http://www.mandriva.com/security/advisories?name=MDVSA-2010:214 http://www.mandriva.com/security/advisories?name=MDVSA-2010:247 http://www.redhat.com/support/errata/RHSA-2010-0758.html http://www.redhat.com/support/errata/RHSA-2010-0882.html http://www.redhat.com/support/errata/RHSA-2010-0842.html SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html SuSE Security Announcement: SUSE-SA:2010:050 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html SuSE Security Announcement: SUSE-SA:2011:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html http://secunia.com/advisories/42384 http://secunia.com/advisories/43315 http://www.vupen.com/english/advisories/2010/3083 http://www.vupen.com/english/advisories/2010/3117 http://www.vupen.com/english/advisories/2011/0298 Common Vulnerability Exposure (CVE) ID: CVE-2010-3301 http://www.openwall.com/lists/oss-security/2010/09/16/1 http://www.openwall.com/lists/oss-security/2010/09/16/3 http://sota.gen.nz/compat2/ http://www.ubuntu.com/usn/USN-1041-1 http://secunia.com/advisories/42758 http://www.vupen.com/english/advisories/2011/0070 Common Vulnerability Exposure (CVE) ID: CVE-2010-3079 BugTraq ID: 43684 http://www.securityfocus.com/bid/43684 Common Vulnerability Exposure (CVE) ID: CVE-2010-3080 http://www.openwall.com/lists/oss-security/2010/09/08/7 http://www.redhat.com/support/errata/RHSA-2011-0007.html SuSE Security Announcement: SUSE-SA:2010:052 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html SuSE Security Announcement: SUSE-SA:2010:054 (Google Search) http://www.ubuntu.com/usn/USN-1000-1 BugTraq ID: 43062 http://www.securityfocus.com/bid/43062 http://secunia.com/advisories/42890 Common Vulnerability Exposure (CVE) ID: CVE-2010-3067 Bugtraq: 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console (Google Search) http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded Debian Security Information: DSA-2126 (Google Search) http://www.debian.org/security/2010/dsa-2126 http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 http://www.redhat.com/support/errata/RHSA-2010-0779.html http://www.redhat.com/support/errata/RHSA-2010-0839.html SuSE Security Announcement: SUSE-SA:2011:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html SuSE Security Announcement: SUSE-SA:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html SuSE Security Announcement: SUSE-SA:2010:060 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html SuSE Security Announcement: SUSE-SA:2011:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html http://secunia.com/advisories/42778 http://secunia.com/advisories/42801 http://secunia.com/advisories/43291 http://secunia.com/advisories/46397 http://www.vupen.com/english/advisories/2011/0012 http://www.vupen.com/english/advisories/2011/0375 XForce ISS Database: kernel-doiosubmit-dos(61884) http://xforce.iss.net/xforce/xfdb/61884 Common Vulnerability Exposure (CVE) ID: CVE-2010-2960 http://www.openwall.com/lists/oss-security/2010/09/02/1 http://twitter.com/taviso/statuses/22777866582 BugTraq ID: 42932 http://www.securityfocus.com/bid/42932 http://securitytracker.com/id?1024384 http://secunia.com/advisories/41263 XForce ISS Database: linux-kernel-keyctl-dos(61557) http://xforce.iss.net/xforce/xfdb/61557 Common Vulnerability Exposure (CVE) ID: CVE-2010-2954 http://www.spinics.net/lists/netdev/msg139404.html http://marc.info/?l=oss-security&m=128331787923285&w=2 http://twitter.com/taviso/statuses/22635752128 SuSE Security Announcement: SUSE-SA:2010:041 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html http://secunia.com/advisories/41234 http://secunia.com/advisories/41512 http://www.vupen.com/english/advisories/2010/2266 http://www.vupen.com/english/advisories/2010/2430 XForce ISS Database: kernel-irdabind-dos(61522) http://xforce.iss.net/xforce/xfdb/61522 Common Vulnerability Exposure (CVE) ID: CVE-2010-2955 http://lkml.org/lkml/2010/8/27/413 http://lkml.org/lkml/2010/8/30/351 http://lkml.org/lkml/2010/8/30/127 http://lkml.org/lkml/2010/8/30/146 http://www.openwall.com/lists/oss-security/2010/08/31/1 http://forums.grsecurity.net/viewtopic.php?f=3&t=2290 http://grsecurity.net/~spender/wireless-infoleak-fix2.patch http://www.redhat.com/support/errata/RHSA-2010-0771.html BugTraq ID: 42885 http://www.securityfocus.com/bid/42885 http://secunia.com/advisories/41245 Common Vulnerability Exposure (CVE) ID: CVE-2010-2524 http://marc.info/?l=oss-security&m=128072090331700&w=2 http://marc.info/?l=oss-security&m=128078387328921&w=2 http://marc.info/?l=oss-security&m=128080755321157&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2010:172 http://www.redhat.com/support/errata/RHSA-2010-0610.html SuSE Security Announcement: SUSE-SA:2010:040 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2010-2478 http://article.gmane.org/gmane.linux.network/164869 http://www.openwall.com/lists/oss-security/2010/06/29/3 http://www.openwall.com/lists/oss-security/2010/06/29/1 http://www.openwall.com/lists/oss-security/2010/06/30/17 BugTraq ID: 41223 http://www.securityfocus.com/bid/41223 Common Vulnerability Exposure (CVE) ID: CVE-2010-2071 http://lkml.org/lkml/2010/5/17/544 http://www.openwall.com/lists/oss-security/2010/06/11/3 http://www.openwall.com/lists/oss-security/2010/06/14/2
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: