Detections
Analytics

Fedora Core 6 : kernel-2.6.20-1.2962.fc6 (2007-600)

high Nessus Plugin ID 25588

Synopsis

The remote Fedora Core host is missing a security update.

Description

Merged stable kernel 2.6.20.12, 2.6.20.13, 2.6.20.14:
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.12 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.13 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.14

Added the latest GFS2 updates from the maintainers.

Utrace update.

CVE-2007-2451: Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES in the Linux kernel before 2.6.21.3 allows attackers to obtain sensitive information via unspecified vectors.

CVE-2007-2875: Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.

CVE-2007-2876: Linux Kernel is prone to multiple weaknesses and vulnerabilities that can allow remote attackers to carry out various attacks, including denial-of-service attacks.

CVE-2007-2453: The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?ca166ff6

http://www.nessus.org/u?0c8da03c

http://www.nessus.org/u?7a48edc5

http://www.nessus.org/u?6344a78a

Plugin Details

Severity: High

ID: 25588

File Name: fedora_2007-600.nasl

Version: 1.16

Type: local

Agent: unix

Published: 6/27/2007

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:kernel, p-cpe:/a:fedoraproject:fedora:kernel-pae, p-cpe:/a:fedoraproject:fedora:kernel-pae-debug, p-cpe:/a:fedoraproject:fedora:kernel-pae-debug-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-pae-debug-devel, p-cpe:/a:fedoraproject:fedora:kernel-pae-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-pae-devel, p-cpe:/a:fedoraproject:fedora:kernel-debug, p-cpe:/a:fedoraproject:fedora:kernel-debug-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-debug-devel, p-cpe:/a:fedoraproject:fedora:kernel-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-debuginfo-common, p-cpe:/a:fedoraproject:fedora:kernel-devel, p-cpe:/a:fedoraproject:fedora:kernel-doc, p-cpe:/a:fedoraproject:fedora:kernel-headers, p-cpe:/a:fedoraproject:fedora:kernel-kdump, p-cpe:/a:fedoraproject:fedora:kernel-kdump-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-kdump-devel, p-cpe:/a:fedoraproject:fedora:kernel-xen, p-cpe:/a:fedoraproject:fedora:kernel-xen-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-xen-devel, cpe:/o:fedoraproject:fedora_core:6

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 6/25/2007

Reference Information

FEDORA: 2007-600