Test ID:	1.3.6.1.4.1.25623.1.0.68971
Category:	CentOS Local Security Checks
Title:	CentOS Security Advisory CESA-2011:0162 (kernel)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates to kernel announced in advisory CESA-2011:0162. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. http://www.securityspace.com/smysecure/catid.html?in=CESA-2011:0162 http://www.securityspace.com/smysecure/catid.html?in=RHSA-2011:0162 https://rhn.redhat.com/errata/RHSA-2011-0162.html Risk factor : High CVSS Score: 6.9
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3859 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console http://www.securityfocus.com/archive/1/520102/100/0/threaded 42789 http://secunia.com/advisories/42789 42963 http://secunia.com/advisories/42963 44354 http://www.securityfocus.com/bid/44354 46397 http://secunia.com/advisories/46397 ADV-2011-0024 http://www.vupen.com/english/advisories/2011/0024 ADV-2011-0168 http://www.vupen.com/english/advisories/2011/0168 DSA-2126 http://www.debian.org/security/2010/dsa-2126 MDVSA-2011:029 http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 RHSA-2011:0004 http://www.redhat.com/support/errata/RHSA-2011-0004.html RHSA-2011:0162 http://www.redhat.com/support/errata/RHSA-2011-0162.html [netdev] 20101021 TIPC security issues http://marc.info/?l=linux-netdev&m=128770476511716&w=2 [netdev] 20101027 Re: [PATCH 1/4] tipc: Fix bugs in tipc_msg_calc_data_size() http://www.spinics.net/lists/netdev/msg145248.html [netdev] 20101027 [PATCH 0/4] RFC: tipc int vs size_t fixes http://www.spinics.net/lists/netdev/msg145247.html [netdev] 20101027 [PATCH 1/4] tipc: Fix bugs in tipc_msg_calc_data_size() http://www.spinics.net/lists/netdev/msg145263.html [netdev] 20101027 [PATCH 2/4] tipc: Fix bugs in tipc_msg_build() http://www.spinics.net/lists/netdev/msg145265.html [netdev] 20101027 [PATCH 3/4] tipc: Update arguments to use size_t for iovec array sizes http://www.spinics.net/lists/netdev/msg145262.html [netdev] 20101027 [PATCH 4/4] tipc: Fix bugs in sending of large amounts of byte-stream data http://www.spinics.net/lists/netdev/msg145264.html [netdev] 20101028 Re: [PATCH 2/4] tipc: Fix bugs in tipc_msg_build() http://www.spinics.net/lists/netdev/msg145352.html [oss-security] 20101022 CVE request: kernel: heap overflow in TIPC http://www.openwall.com/lists/oss-security/2010/10/22/2 [oss-security] 20101022 Re: CVE request: kernel: heap overflow in TIPC http://www.openwall.com/lists/oss-security/2010/10/22/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 http://www.vmware.com/security/advisories/VMSA-2011-0012.html https://bugzilla.redhat.com/show_bug.cgi?id=645867 Common Vulnerability Exposure (CVE) ID: CVE-2010-3876 42890 http://secunia.com/advisories/42890 44630 http://www.securityfocus.com/bid/44630 RHSA-2010:0958 http://www.redhat.com/support/errata/RHSA-2010-0958.html RHSA-2011:0007 http://www.redhat.com/support/errata/RHSA-2011-0007.html [netdev] 20101031 [PATCH 2/3] net: packet: fix information leak to userland http://marc.info/?l=linux-netdev&m=128854507220908&w=2 [oss-security] 20101102 CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/02/7 [oss-security] 20101102 Re: CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/02/10 http://openwall.com/lists/oss-security/2010/11/02/12 http://openwall.com/lists/oss-security/2010/11/02/9 [oss-security] 20101104 Re: CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/04/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67286640f638f5ad41a946b9a3dc75327950248f http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 https://bugzilla.redhat.com/show_bug.cgi?id=649715 Common Vulnerability Exposure (CVE) ID: CVE-2010-4072 BugTraq ID: 45054 http://www.securityfocus.com/bid/45054 Bugtraq: 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console (Google Search) Debian Security Information: DSA-2126 (Google Search) http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 http://lkml.org/lkml/2010/10/6/454 http://www.openwall.com/lists/oss-security/2010/10/07/1 http://www.openwall.com/lists/oss-security/2010/10/25/3 http://www.redhat.com/support/errata/RHSA-2011-0017.html http://secunia.com/advisories/42758 http://secunia.com/advisories/42778 http://secunia.com/advisories/42884 http://secunia.com/advisories/42932 http://secunia.com/advisories/43161 http://secunia.com/advisories/43291 SuSE Security Announcement: SUSE-SA:2010:060 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html SuSE Security Announcement: SUSE-SA:2011:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html SuSE Security Announcement: SUSE-SA:2011:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html SuSE Security Announcement: SUSE-SA:2011:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html SuSE Security Announcement: SUSE-SA:2011:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html http://www.ubuntu.com/usn/USN-1041-1 http://www.ubuntu.com/usn/USN-1057-1 http://www.vupen.com/english/advisories/2011/0012 http://www.vupen.com/english/advisories/2011/0070 http://www.vupen.com/english/advisories/2011/0124 http://www.vupen.com/english/advisories/2011/0280 http://www.vupen.com/english/advisories/2011/0298 http://www.vupen.com/english/advisories/2011/0375 Common Vulnerability Exposure (CVE) ID: CVE-2010-4073 BugTraq ID: 45073 http://www.securityfocus.com/bid/45073 http://lkml.org/lkml/2010/10/6/492 http://securityreason.com/securityalert/8366 Common Vulnerability Exposure (CVE) ID: CVE-2010-4075 BugTraq ID: 43806 http://www.securityfocus.com/bid/43806 http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03388.html http://www.openwall.com/lists/oss-security/2010/09/25/2 http://www.openwall.com/lists/oss-security/2010/10/06/6 Common Vulnerability Exposure (CVE) ID: CVE-2010-4080 BugTraq ID: 45058 http://www.securityfocus.com/bid/45058 BugTraq ID: 45063 http://www.securityfocus.com/bid/45063 http://lkml.org/lkml/2010/9/25/41 http://secunia.com/advisories/42801 SuSE Security Announcement: SUSE-SA:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4083 BugTraq ID: 43809 http://www.securityfocus.com/bid/43809 http://www.spinics.net/lists/mm-commits/msg80234.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4157 42745 http://secunia.com/advisories/42745 42778 42801 42932 43291 44648 http://www.securityfocus.com/bid/44648 ADV-2010-3321 http://www.vupen.com/english/advisories/2010/3321 ADV-2011-0012 ADV-2011-0124 ADV-2011-0298 ADV-2011-0375 FEDORA-2010-18983 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html SUSE-SA:2010:060 SUSE-SA:2011:001 SUSE-SA:2011:002 SUSE-SA:2011:004 SUSE-SA:2011:007 SUSE-SA:2011:008 [linux-scsi] 20101008 [patch] gdth: integer overflow in ioctl http://ns3.spinics.net/lists/linux-scsi/msg47361.html [oss-security] 20101108 CVE request: kernel: gdth: integer overflow in ioc_general() http://openwall.com/lists/oss-security/2010/11/09/1 [oss-security] 20101108 Re: CVE request: kernel: gdth: integer overflow in ioc_general() http://openwall.com/lists/oss-security/2010/11/09/3 [oss-security] 20101109 Re: CVE request: kernel: gdth: integer overflow in ioc_general() http://openwall.com/lists/oss-security/2010/11/09/4 http://openwall.com/lists/oss-security/2010/11/09/5 [oss-security] 20101110 Re: CVE request: kernel: gdth: integer overflow in ioc_general() http://openwall.com/lists/oss-security/2010/11/10/12 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f63ae56e4e97fb12053590e41a4fa59e7daa74a4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.1 https://bugzilla.redhat.com/show_bug.cgi?id=651147 Common Vulnerability Exposure (CVE) ID: CVE-2010-4158 20101109 Kernel 0-day http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077321.html http://www.securityfocus.com/archive/1/514705 20101118 Re: Kernel 0-day http://www.securityfocus.com/archive/1/514845 42884 44758 http://www.securityfocus.com/bid/44758 RHSA-2011:0017 [netdev] 20101109 [PATCH] Prevent reading uninitialized memory with socket filters http://www.spinics.net/lists/netdev/msg146361.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=57fe93b374a6b8711995c2d466c502af9f3a08bb https://bugzilla.redhat.com/show_bug.cgi?id=651698 Common Vulnerability Exposure (CVE) ID: CVE-2010-4242 45014 http://www.securityfocus.com/bid/45014 [linux-kernel] 20101007 Peculiar stuff in hci_ath3k/badness in hci_uart https://lkml.org/lkml/2010/10/7/255 http://git.kernel.org/linus/c19483cc5e56ac5e22dd19cf25ba210ab1537773 http://xorl.wordpress.com/2010/12/01/cve-2010-4242-linux-kernel-bluetooth-hci-uart-invalid-pointer-access/ https://bugzilla.redhat.com/show_bug.cgi?id=641410 kernel-hciuartttyopen-dos(64617) https://exchange.xforce.ibmcloud.com/vulnerabilities/64617 Common Vulnerability Exposure (CVE) ID: CVE-2010-4249 15622 http://www.exploit-db.com/exploits/15622/ 42354 http://secunia.com/advisories/42354 45037 http://www.securityfocus.com/bid/45037 [linux-kernel] 20101123 Unix socket local DOS (OOM) http://lkml.org/lkml/2010/11/23/395 [linux-kernel] 20101124 [PATCH net-next-2.6] scm: lower SCM_MAX_FD http://lkml.org/lkml/2010/11/23/450 [linux-kernel] 20101125 Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect :( http://lkml.org/lkml/2010/11/25/8 [netdev] 20101124 [PATCH] af_unix: limit unix_tot_inflight http://marc.info/?l=linux-netdev&m=129059035929046&w=2 [oss-security] 20101124 CVE request: kernel: unix socket local dos http://www.openwall.com/lists/oss-security/2010/11/24/2 [oss-security] 20101124 Re: CVE request: kernel: unix socket local dos http://www.openwall.com/lists/oss-security/2010/11/24/10 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9915672d41273f5b77f1b3c29b391ffb7732b84b http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.37-rc3-next-20101125.bz2 https://bugzilla.redhat.com/show_bug.cgi?id=656756 Common Vulnerability Exposure (CVE) ID: CVE-2010-4258 20101207 Linux kernel exploit http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html 43056 http://secunia.com/advisories/43056 ADV-2011-0213 http://www.vupen.com/english/advisories/2011/0213 SUSE-SA:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html [linux-kernel] 20101201 Re: [PATCH v2] do_exit(): Make sure we run with get_fs() == USER_DS. https://lkml.org/lkml/2010/12/1/543 [linux-kernel] 20101201 [PATCH v2] do_exit(): Make sure we run with get_fs() == USER_DS. http://marc.info/?l=linux-kernel&m=129117048916957&w=2 [oss-security] 20101202 CVE request: kernel: failure to revert address limit override in OOPS error path http://openwall.com/lists/oss-security/2010/12/02/2 [oss-security] 20101202 Re: CVE request: kernel: failure to revert address limit override in OOPS error path http://openwall.com/lists/oss-security/2010/12/02/7 [oss-security] 20101202 Re: kernel: Dangerous interaction between clear_child_tid, set_fs(), and kernel oopses http://openwall.com/lists/oss-security/2010/12/02/4 [oss-security] 20101202 kernel: Dangerous interaction between clear_child_tid, set_fs(), and kernel oopses http://openwall.com/lists/oss-security/2010/12/02/3 [oss-security] 20101208 Re: kernel: Dangerous interaction between clear_child_tid, set_fs(), and kernel oopses http://openwall.com/lists/oss-security/2010/12/08/4 http://openwall.com/lists/oss-security/2010/12/08/5 http://openwall.com/lists/oss-security/2010/12/08/9 [oss-security] 20101209 Re: kernel: Dangerous interaction between clear_child_tid, set_fs(), and kernel oopses http://openwall.com/lists/oss-security/2010/12/09/14 http://openwall.com/lists/oss-security/2010/12/09/4 http://blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/ http://code.google.com/p/chromium-os/issues/detail?id=10234 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=33dd94ae1ccbfb7bf0fb6c692bc3d1c4269e6177 http://googlechromereleases.blogspot.com/2011/01/chrome-os-beta-channel-update.html https://bugzilla.redhat.com/show_bug.cgi?id=659567
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.