Red Hat安全公告—2016年10月

CVE-2016-6325

Important

tomcat、tomcat5、tomcat6

2016/10/10

CVE-2016-5425

Important

tomcat

2016/10/10

CVE-2016-7039

Important

kernel-rt

2016/10/10

CVE-2016-2776

Important

bind、bind97

2016/9/27

CVE-2016-7050

Important

resteasy-base

2016/9/23

CVE-2016-6304

Important

openssl

2016/9/22

CVE-2016-7545

Important

policycoreutils

2016/9/22

标题

CVE-2016-6325

描述

It was discovered that the Tomcat packages installed certain configuration files read by the Tomcat initialization script as writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges.

Find out more about CVE-2016-6325 from the MITRE CVE dictionary dictionary and NIST NVD.

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 5 (tomcat5)

Red Hat Enterprise Linux 6 (tomcat6)

Red Hat Enterprise Linux 7 (tomcat)

Bugzilla

1367447: CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation

详细信息

https://access.redhat.com/security/cve/cve-2016-6325

公告标识 CVE-2016-5425

标题

CVE-2016-5425

描述

It was discovered that the Tomcat packages installed configuration file /usr/lib/tmpfiles.d/tomcat.conf writeable to the tomcat group. A member of the group or a malicious web application deployed on Tomcat could use this flaw to escalate their privileges.

Find out more about CVE-2016-5425 from the MITRE CVE dictionary dictionary and NIST NVD.

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 7 (tomcat)

Bugzilla

1362545: CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service

详细信息

https://access.redhat.com/security/cve/cve-2016-5425

公告标识 CVE-2016-7039

标题

CVE-2016-7039

描述

Linux kernel built with the 802.1Q/802.1ad VLAN(CONFIG_VLAN_8021Q) OR Virtual eXtensible Local Area Network(CONFIG_VXLAN) with Transparent Ethernet Bridging(TEB) GRO support, is vulnerable to a stack overflow issue. It could occur while receiving large packets via GRO path; As an unlimited recursion could unfold in both VLAN and TEB modules, leading to a stack corruption in the kernel.

Find out more about CVE-2016-7039 from the MITRE CVE dictionary dictionary and NIST NVD

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 7 (kernel-rt)

Bugzilla

1375944: CVE-2016-7039 kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash

详细信息

https://access.redhat.com/security/cve/cve-2016-7039

公告标识 CVE-2016-2776

标题

CVE-2016-2776

描述

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet.

Find out more about CVE-2016-2776 from the MITRE CVE dictionary dictionary and NIST NVD.

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 7 (bind)

Red Hat Enterprise Linux 5 (bind)

Red Hat Enterprise Linux 5 (bind97)

Red Hat Enterprise Linux 6 (bind)

Bugzilla

1378380: CVE-2016-2776 bind: assertion failure in buffer.c while building responses to a specifically constructed request

详细信息

https://access.redhat.com/security/cve/cve-2016-2776

公告标识 CVE-2016-7050

标题

CVE-2016-7050

描述

Under certain conditions it's possible for an attacker to force the use of a SerializableProvider to parse a request in RESTEasy. An attacker can use this flaw to launch a remote code execution attack.

Find out more about CVE-2016-7050 from the MITRE CVE dictionary dictionary and NIST NVD.

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 7 (resteasy-base )

Bugzilla

1378613: CVE-2016-7050 RESTEasy:SerializableProvider enabled by default and deserializes untrusted data

详细信息

https://access.redhat.com/security/cve/cve-2016-7050

公告标识 CVE-2016-6304

标题

CVE-2016-6304

描述

A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.

Find out more about CVE-2016-6304 from the MITRE CVE dictionary dictionary and NIST NVD.

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 6 (openssl)

Red Hat Enterprise Linux 7 (openssl)

Bugzilla

1377600: CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth

详细信息

https://access.redhat.com/security/cve/cve-2016-6304

公告标识 CVE-2016-7545

标题

CVE-2016-7545

描述

It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack. A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent bash, escaping the sandbox.

Find out more about CVE-2016-7545 from the MITRE CVE dictionary dictionary and NIST NVD.

最高严重等级

Important

漏洞的影响

Red Hat Enterprise Linux 7 (policycoreutils )

Red Hat Enterprise Linux 6 ( policycoreutils )

Bugzilla

1378577: CVE-2016-7545 policycoreutils: SELinux sandbox escape via TIOCSTI ioctl

详细信息

https://access.redhat.com/security/cve/cve-2016-3610