Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2019:3872
HistoryNov 14, 2019 - 7:43 p.m.

bpftool, kernel, perf, python security update

2019-11-1419:43:02
CentOS Project
lists.centos.org
236

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

14.3%

JSON

CentOS Errata and Security Advisory CESA-2019:3872

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2019-November/085679.html

Affected packages:
bpftool
kernel
kernel-abi-whitelists
kernel-debug
kernel-debug-devel
kernel-devel
kernel-doc
kernel-headers
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python-perf

Upstream details at:
https://access.redhat.com/errata/RHSA-2019:3872

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64bpftool< 3.10.0-1062.4.3.el7bpftool-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7x86_64kernel< 3.10.0-1062.4.3.el7kernel-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7noarchkernel-abi-whitelists< 3.10.0-1062.4.3.el7kernel-abi-whitelists-3.10.0-1062.4.3.el7.noarch.rpm
CentOS7x86_64kernel-debug< 3.10.0-1062.4.3.el7kernel-debug-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7x86_64kernel-debug-devel< 3.10.0-1062.4.3.el7kernel-debug-devel-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7x86_64kernel-devel< 3.10.0-1062.4.3.el7kernel-devel-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7noarchkernel-doc< 3.10.0-1062.4.3.el7kernel-doc-3.10.0-1062.4.3.el7.noarch.rpm
CentOS7x86_64kernel-headers< 3.10.0-1062.4.3.el7kernel-headers-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7x86_64kernel-tools< 3.10.0-1062.4.3.el7kernel-tools-3.10.0-1062.4.3.el7.x86_64.rpm
CentOS7x86_64kernel-tools-libs< 3.10.0-1062.4.3.el7kernel-tools-libs-3.10.0-1062.4.3.el7.x86_64.rpm
Rows per page:
1-10 of 131

Related

symantec 1
centos 1
nessus 57
ubuntucve 1
openvas 56
oraclelinux 9
redhat 12
debiancve 1
cve 1
cvelist 1
redhatcve 1
veracode 1
nvd 1
prion 1
f5 1
mageia 2
slackware 1
fedora 27
osv 2
virtuozzo 2
debian 3
suse 2
lenovo 2
intel 1
ubuntu 9
hp 1
cloudfoundry 2
symantec
symantec
Multiple Intel Products CVE-2019-0155 Local Privilege Escalation Vulnerability
2019-11-12 00:00:00
centos
centos
kernel, perf, python security update
2019-11-14 21:12:04
nessus
nessus
CentOS 6 : kernel (CESA-2019:3878)
2019-11-15 00:00:00
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20191114)
2019-11-15 00:00:00
Oracle Linux 6 : kernel (ELSA-2019-3878)
2019-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2019-0155
2019-11-12 00:00:00
openvas
openvas
CentOS Update for kernel CESA-2019:3878 centos6
2019-11-15 00:00:00
CentOS Update for bpftool CESA-2019:3872 centos7
2019-11-15 00:00:00
Mageia: Security Advisory (MGASA-2019-0332)
2022-01-28 00:00:00
oraclelinux
oraclelinux
kernel security update
2019-11-14 00:00:00
kernel security update
2019-11-22 00:00:00
kernel security update
2019-11-14 00:00:00
redhat
redhat
(RHSA-2019:3887) Important: kernel-rt security update
2019-11-14 16:54:53
(RHSA-2019:3870) Important: kernel-rt security update
2019-11-13 16:22:14
(RHSA-2019:3878) Important: kernel security update
2019-11-13 19:31:44
debiancve
debiancve
CVE-2019-0155
2019-11-14 19:15:12
cve
cve
CVE-2019-0155
2019-11-14 19:15:12
cvelist
cvelist
CVE-2019-0155
2019-11-14 18:42:54
redhatcve
redhatcve
CVE-2019-0155
2020-08-18 12:17:57
veracode
veracode
Privilege Escalation
2019-11-14 00:18:29
nvd
nvd
CVE-2019-0155
2019-11-14 19:15:12
prion
prion
Improper access control
2019-11-14 19:15:00
f5
f5
K73659122 : GPU vulnerabilities CVE-2019-0154 and CVE-2019-0155
2019-11-20 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2019-11-20 00:16:53
Updated kernel-linus packages fix security vulnerabilities
2019-11-20 00:16:53
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-11-16 20:57:46
fedora
fedora
[SECURITY] Fedora 30 Update: kernel-headers-5.3.11-200.fc30
2019-11-13 06:28:06
[SECURITY] Fedora 30 Update: microcode_ctl-2.1-33.fc30
2019-11-13 06:28:06
[SECURITY] Fedora 30 Update: kernel-tools-5.3.11-200.fc30
2019-11-13 06:28:06
osv
osv
linux-4.9 - security update
2019-11-12 00:00:00
linux - security update
2019-11-12 00:00:00
virtuozzo
virtuozzo
Important kernel security update: New kernel 2.6.32-042stab141.3; Virtuozzo 6.0 Update 12 Hotfix 48 (6.0.12-3753)
2019-11-21 00:00:00
Important kernel security update: New kernel 2.6.32-042stab141.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2019-11-21 00:00:00
debian
debian
[SECURITY] [DLA 1990-1] linux-4.9 security update
2019-11-13 22:51:44
[SECURITY] [DSA 4564-1] linux security update
2019-11-12 19:17:26
[SECURITY] [DSA 4564-1] linux security update
2019-11-12 19:17:26
suse
suse
Security update for the Linux Kernel (important)
2019-11-14 00:00:00
Security update for the Linux Kernel (important)
2019-11-14 00:00:00
lenovo
lenovo
Intel Graphics Vulnerabilities - Lenovo Support US
2019-11-04 14:48:49
Intel Graphics Vulnerabilities - Lenovo Support US
2019-11-04 14:48:49
intel
intel
2019.2 IPU – Intel® Graphics Driver for Windows* and Linux Advisory
2019-11-12 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2019-11-13 00:00:00
Linux kernel vulnerability
2019-11-13 00:00:00
Linux kernel vulnerabilities
2019-11-13 00:00:00
hp
hp
HPSBHF03636 rev. 4 - Intel 2019.2 IPU Graphics Driver Security Updates
2019-11-09 00:00:00
cloudfoundry
cloudfoundry
USN-4185-1: Linux kernel vulnerabilities | Cloud Foundry
2019-11-21 00:00:00
USN-4185-3: Linux kernel vulnerability and regression | Cloud Foundry
2019-11-21 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

14.3%

JSON
Related for CESA-2019:3872
symantec1centos1nessus57ubuntucve1openvas56oraclelinux9redhat12debiancve1cve1cvelist1redhatcve1veracode1nvd1prion1f51mageia2slackware1fedora27osv2virtuozzo2debian3suse2lenovo2intel1ubuntu9hp1cloudfoundry2