RHSA-2019:2703
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: kernel security and bug fix update
CVSS Metrics
- v3.0•HIGH•Score: 8CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Systems
- redhat•bpftool
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•bpftool-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-abi-whitelists
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-core
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-cross-headers
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debug
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debug-core
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debug-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debug-devel
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debug-modules
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debug-modules-extra
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debuginfo-common-aarch64
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debuginfo-common-ppc64le
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debuginfo-common-s390x
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-debuginfo-common-x86_64
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-devel
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-doc
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-headers
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-modules
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-modules-extra
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-tools
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-tools-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-tools-libs
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-tools-libs-devel
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-zfcpdump
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-zfcpdump-core
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-zfcpdump-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-zfcpdump-devel
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-zfcpdump-modules
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•kernel-zfcpdump-modules-extra
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•perf
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•perf-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•python3-perf
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
- redhat•python3-perf-debuginfo
< 0:4.18.0-80.11.1.el8_0 | < 0:4.18.0-80.11.1.el8_0
References (38)
- https://access.redhat.com/errata/RHSA-2019:2703
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=1655816
- https://bugzilla.redhat.com/show_bug.cgi?id=1695044
- https://bugzilla.redhat.com/show_bug.cgi?id=1701224
- https://bugzilla.redhat.com/show_bug.cgi?id=1701842
- https://bugzilla.redhat.com/show_bug.cgi?id=1703063
- https://bugzilla.redhat.com/show_bug.cgi?id=1713059
- https://bugzilla.redhat.com/show_bug.cgi?id=1720616
- https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2703.json
- https://access.redhat.com/security/cve/CVE-2018-19824
- https://www.cve.org/CVERecord?id=CVE-2018-19824
- https://nvd.nist.gov/vuln/detail/CVE-2018-19824
- https://www.openwall.com/lists/oss-security/2018/12/03/1
- https://access.redhat.com/security/cve/CVE-2019-3846
- https://www.cve.org/CVERecord?id=CVE-2019-3846
- https://nvd.nist.gov/vuln/detail/CVE-2019-3846
- https://seclists.org/oss-sec/2019/q2/133
- https://access.redhat.com/security/cve/CVE-2019-3887
- https://www.cve.org/CVERecord?id=CVE-2019-3887
- https://nvd.nist.gov/vuln/detail/CVE-2019-3887
- https://access.redhat.com/security/cve/CVE-2019-9500
- https://www.cve.org/CVERecord?id=CVE-2019-9500
- https://nvd.nist.gov/vuln/detail/CVE-2019-9500
- https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9500-heap-buffer-overflow-in-brcmf-wowl-nd-results
- https://kb.cert.org/vuls/id/166939/
- https://www.bleepingcomputer.com/news/security/broadcom-wifi-driver-flaws-expose-computers-phones-iot-to-rce-attacks/
- https://access.redhat.com/security/cve/CVE-2019-9503
- https://www.cve.org/CVERecord?id=CVE-2019-9503
- https://nvd.nist.gov/vuln/detail/CVE-2019-9503
- https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html#cve-2019-9503-remotely-sending-firmware-events-bypassing-is-wlc-event-frame
- https://access.redhat.com/security/cve/CVE-2019-11487
- https://www.cve.org/CVERecord?id=CVE-2019-11487
- https://nvd.nist.gov/vuln/detail/CVE-2019-11487
- https://access.redhat.com/security/cve/CVE-2019-12817
- https://www.cve.org/CVERecord?id=CVE-2019-12817
- https://nvd.nist.gov/vuln/detail/CVE-2019-12817
- https://seclists.org/oss-sec/2019/q2/200