Scientific Linux Security Update : kernel on SL6.x i386/x86_64

High Nessus Plugin ID 103502


The remote Scientific Linux host is missing one or more security updates.


Security Fix(es) :

- A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253, Important)


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 103502

File Name: sl_20170926_kernel_on_SL6_x.nasl

Version: $Revision: 3.6 $

Type: local

Agent: unix

Published: 2017/09/27

Modified: 2018/01/29

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C


Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2017/09/26

Reference Information

CVE: CVE-2017-1000253

IAVB: 2017-B-0135