Redhat Enterprise Linux Advanced mission critical Update Support (AUS) 6.6
Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:enterprise_linux_aus:6.6:*:*:*:*:*:*:*
part: o version: 6.6 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Linux Aus (701054c2-b352-560c-ad82-1b1da7909c67) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11478 |
vulnerable | 2026-06-08 05:12:37.242090 |
SACK can cause extensive memory use via fragmented resend queue
MEDIUM (5.3)
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
Published: 2019-06-18T23:34:51.077Z
Updated: 2024-09-16T23:45:54.779Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11477 |
vulnerable | 2026-06-08 05:12:37.233007 |
Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
HIGH (7.5)
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
Published: 2019-06-18T23:34:51.026Z
Updated: 2024-09-17T02:21:15.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9585 |
vulnerable | 2026-06-08 05:06:12.181672 |
Details available
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.
Published: 2015-01-09T21:00:00.000Z
Updated: 2024-08-06T13:47:41.817Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9584 |
vulnerable | 2026-06-08 05:06:12.173009 |
Details available
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.
Published: 2015-01-09T21:00:00.000Z
Updated: 2024-08-06T13:47:41.674Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.