{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 12.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 14.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 10.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-5077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5077"
    },
    {
      "name": "CVE-2014-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5472"
    },
    {
      "name": "CVE-2014-5471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5471"
    },
    {
      "name": "CVE-2014-3601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3601"
    }
  ],
  "initial_release_date": "2014-09-24T00:00:00",
  "last_revision_date": "2014-09-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-396",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-09-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux\nd\u0027\u003cspan class=\"textit\"\u003eUbuntu\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Ubuntu",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2355-1 du 23 septembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2355-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2359-1 du 23 septembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2359-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2358-1 du 23 septembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2358-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2354-1 du 23 septembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2354-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2357-1 du 23 septembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2357-1/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-2356-1 du 23 septembre 2014",
      "url": "http://www.ubuntu.com/usn/usn-2356-1/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Workstation version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server EUS version 6",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux HPC Node version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server version 6",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Desktop version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-3673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3673"
    },
    {
      "name": "CVE-2012-6657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6657"
    },
    {
      "name": "CVE-2014-3687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3687"
    },
    {
      "name": "CVE-2014-6410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6410"
    },
    {
      "name": "CVE-2014-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5472"
    },
    {
      "name": "CVE-2014-5471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5471"
    },
    {
      "name": "CVE-2014-3688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3688"
    },
    {
      "name": "CVE-2014-9322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9322"
    }
  ],
  "initial_release_date": "2014-12-17T00:00:00",
  "last_revision_date": "2014-12-17T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2014-1997 du 16 d\u00e9cembre    2014",
      "url": "https://rhn.redhat.com/errata/RHSA-2014-1997.html"
    }
  ],
  "reference": "CERTFR-2014-AVI-532",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-12-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau linux \u003cspan\nclass=\"textit\"\u003eRedHat\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance, un d\u00e9ni de service et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau linux RedHat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2014-1997 du 16 d\u00e9cembre 2014",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Entreprise Linux Server EUS (v 6.5.z)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server AUS (v. 6.5)",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-8159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8159"
    },
    {
      "name": "CVE-2014-3690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3690"
    },
    {
      "name": "CVE-2014-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5472"
    },
    {
      "name": "CVE-2014-5471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5471"
    },
    {
      "name": "CVE-2015-1421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1421"
    },
    {
      "name": "CVE-2014-8884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8884"
    },
    {
      "name": "CVE-2013-2596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2596"
    }
  ],
  "initial_release_date": "2015-04-08T00:00:00",
  "last_revision_date": "2015-04-08T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2015:0782-1 du 07 avril    2015",
      "url": "https://rhn.redhat.com/errata/RHSA-2015-0782.html"
    }
  ],
  "reference": "CERTFR-2015-AVI-136",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-04-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux\u003cspan\nclass=\"textit\"\u003eRed Hat\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance, un d\u00e9ni de service et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Red Hat Enterprise Linux Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2015:0782-1 du 07 avril 2015",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eRed Hat Enterprise Linux 6.4\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-8159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8159"
    },
    {
      "name": "CVE-2014-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5472"
    },
    {
      "name": "CVE-2014-5471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5471"
    },
    {
      "name": "CVE-2013-2596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2596"
    }
  ],
  "initial_release_date": "2015-04-15T00:00:00",
  "last_revision_date": "2015-04-15T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red-Hat RHSA-2015:0803-1 du 14 avril    2015",
      "url": "https://rhn.redhat.com/errata/RHSA-2015-0803.html"
    }
  ],
  "reference": "CERTFR-2015-AVI-164",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-04-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eRed-Hat\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red-Hat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red-Hat RHSA-2015:0803-1 du 14 avril 2015",
      "url": null
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8452407A-5074-4385-B9A1-9E49042CCAEB",
              "versionEndIncluding": "3.16.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:3.16.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CFFCDFC-AE4F-47EE-B1DA-05A6865D1745",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n parse_rock_ridge_inode_internal en fs/isofs/rock.c en el kernel de Linux hasta 3.16.1 permite a usuarios locales causar una denegaci\u00f3n de servicio (un proceso de montaje imparable) a trav\u00e9s de un imagen iso9660 manipulado con una entrada CL de auto referencia."
    }
  ],
  "id": "CVE-2014-5472",
  "lastModified": "2026-05-06T22:30:45.220",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 4.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 1.9,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-09-01T01:55:28.593",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/69428"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2354-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2355-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2356-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2357-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2358-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-2359-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/69428"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2354-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2355-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2356-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2357-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2358-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-2359-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2014-5472"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2014-09-01T01:55:00Z",
    "severity": "MODERATE"
  },
  "details": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.",
  "id": "GHSA-8jr9-77qv-x3wr",
  "modified": "2025-04-12T12:37:03Z",
  "published": "2022-05-17T01:15:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5472"
    },
    {
      "type": "WEB",
      "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
    },
    {
      "type": "WEB",
      "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
    },
    {
      "type": "WEB",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    },
    {
      "type": "WEB",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/69428"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2354-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2355-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2356-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2357-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2358-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2359-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2014-5472",
    "description": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.",
    "id": "GSD-2014-5472",
    "references": [
      "https://www.suse.com/security/cve/CVE-2014-5472.html",
      "https://access.redhat.com/errata/RHSA-2015:0803",
      "https://access.redhat.com/errata/RHSA-2015:0782",
      "https://access.redhat.com/errata/RHSA-2015:0695",
      "https://access.redhat.com/errata/RHSA-2015:0102",
      "https://access.redhat.com/errata/RHSA-2014:1997",
      "https://access.redhat.com/errata/RHSA-2014:1318",
      "https://ubuntu.com/security/CVE-2014-5472",
      "https://linux.oracle.com/cve/CVE-2014-5472.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2014-5472"
      ],
      "details": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.",
      "id": "GSD-2014-5472",
      "modified": "2023-12-13T01:22:52.235185Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2014-5472",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "linux-kernel-cve20145472-dos(95556)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
          },
          {
            "name": "69428",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/69428"
          },
          {
            "name": "RHSA-2014:1318",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
          },
          {
            "name": "RHSA-2015:0695",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
          },
          {
            "name": "HPSBGN03285",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
          },
          {
            "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
          },
          {
            "name": "SUSE-SU-2014:1316",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
          },
          {
            "name": "USN-2356-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2356-1"
          },
          {
            "name": "USN-2355-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2355-1"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
          },
          {
            "name": "USN-2357-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2357-1"
          },
          {
            "name": "HPSBGN03282",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
          },
          {
            "name": "RHSA-2015:0803",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
          },
          {
            "name": "SUSE-SU-2014:1319",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "USN-2359-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2359-1"
          },
          {
            "name": "USN-2354-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2354-1"
          },
          {
            "name": "RHSA-2015:0782",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
          },
          {
            "name": "USN-2358-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2358-1"
          },
          {
            "name": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
            "refsource": "CONFIRM",
            "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
          },
          {
            "name": "https://code.google.com/p/google-security-research/issues/detail?id=88",
            "refsource": "MISC",
            "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
          },
          {
            "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
            "refsource": "CONFIRM",
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
          },
          {
            "name": "RHSA-2015:0102",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.16.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.16.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-5472"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Patch"
              ],
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
            },
            {
              "name": "[oss-security] 20140827 Re: CVE Request: Linux Kernel unbound recursion in ISOFS",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2014/08/27/1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Patch"
              ],
              "url": "https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4"
            },
            {
              "name": "https://code.google.com/p/google-security-research/issues/detail?id=88",
              "refsource": "MISC",
              "tags": [],
              "url": "https://code.google.com/p/google-security-research/issues/detail?id=88"
            },
            {
              "name": "USN-2355-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2355-1"
            },
            {
              "name": "USN-2354-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2354-1"
            },
            {
              "name": "USN-2358-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2358-1"
            },
            {
              "name": "USN-2359-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2359-1"
            },
            {
              "name": "USN-2357-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2357-1"
            },
            {
              "name": "USN-2356-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-2356-1"
            },
            {
              "name": "RHSA-2014:1318",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1318.html"
            },
            {
              "name": "SUSE-SU-2014:1316",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html"
            },
            {
              "name": "SUSE-SU-2014:1319",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html"
            },
            {
              "name": "SUSE-SU-2015:0481",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
            },
            {
              "name": "RHSA-2015:0102",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0102.html"
            },
            {
              "name": "RHSA-2015:0695",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0695.html"
            },
            {
              "name": "openSUSE-SU-2015:0566",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
            },
            {
              "name": "RHSA-2015:0782",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0782.html"
            },
            {
              "name": "RHSA-2015:0803",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-0803.html"
            },
            {
              "name": "SUSE-SU-2015:0812",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
            },
            {
              "name": "HPSBGN03285",
              "refsource": "HP",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=142722450701342\u0026w=2"
            },
            {
              "name": "HPSBGN03282",
              "refsource": "HP",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=142722544401658\u0026w=2"
            },
            {
              "name": "69428",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/69428"
            },
            {
              "name": "linux-kernel-cve20145472-dos(95556)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95556"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 1.9,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-09-08T01:29Z",
      "publishedDate": "2014-09-01T01:55Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Red Hat Enterprise MRG Realtime packages that fix multiple security\nissues and add one enhancement are now available for Red Hat Enterprise MRG\n2.5.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nMRG Realtime provides the highest levels of predictability for consistent\nlow-latency response times to meet the needs of time-sensitive workloads.\nMRG Realtime also provides new levels of determinism by optimizing lengthy\nkernel code paths to ensure that they do not become bottlenecks. This\nallows for better prioritization of applications, resulting in consistent,\npredictable response times for high-priority applications.\n\n* An out-of-bounds write flaw was found in the way the Apple Magic\nMouse/Trackpad multi-touch driver handled Human Interface Device (HID)\nreports with an invalid size. An attacker with physical access to the\nsystem could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system. (CVE-2014-3181, Moderate)\n\n* A memory corruption flaw was found in the way the USB ConnectTech\nWhiteHEAT serial driver processed completion commands sent via USB Request\nBlocks buffers. An attacker with physical access to the system could use\nthis flaw to crash the system or, potentially, escalate their privileges on\nthe system. (CVE-2014-3185, Moderate)\n\n* A race condition flaw was found in the way the Linux kernel\u0027s mmap(2),\nmadvise(2), and fallocate(2) system calls interacted with each other while\noperating on virtual memory file system files. A local user could use this\nflaw to cause a denial of service. (CVE-2014-4171, Moderate)\n\n* A stack overflow flaw caused by infinite recursion was found in the way\nthe Linux kernel\u0027s Universal Disk Format (UDF) file system implementation\nprocessed indirect Information Control Blocks (ICBs). An attacker with\nphysical access to the system could use a specially crafted UDF image to\ncrash the system. (CVE-2014-6410, Low)\n\n* An out-of-bounds read flaw was found in the way the Logitech Unifying\nreceiver driver handled HID reports with an invalid device_index value.\nAn attacker with physical access to the system could use this flaw to crash\nthe system or, potentially, escalate their privileges on the system.\n(CVE-2014-3182, Low)\n\n* Multiple out-of-bounds write flaws were found in the way the Cherry\nCymotion keyboard driver, KYE/Genius device drivers, Logitech device\ndrivers, Monterey Genius KB29E keyboard driver, Petalynx Maxter remote\ncontrol driver, and Sunplus wireless desktop driver handled HID reports\nwith an invalid report descriptor size. An attacker with physical access to\nthe system could use either of these flaws to write data past an allocated\nmemory buffer. (CVE-2014-3184, Low)\n\n* It was found that the parse_rock_ridge_inode_internal() function of the\nLinux kernel\u0027s ISOFS implementation did not correctly check relocated\ndirectories when processing Rock Ridge child link (CL) tags. An attacker\nwith physical access to the system could use a specially crafted ISO image\nto crash the system or, potentially, escalate their privileges on the\nsystem. (CVE-2014-5471, CVE-2014-5472, Low)\n\nThis update also adds the following enhancement:\n\n* The Solarflare SFC9120 10GBE Ethernet NICs were not supported by the MRG\nRealtime kernel. With this update, the drivers have been updated to enable\nthe Solarflare SFC9120 cards on the Realtime kernel. (BZ#1086945)\n\nAll Red Hat Enterprise MRG Realtime users are advised to upgrade to these\nupdated packages, which contain backported patches to correct these issues\nand add this enhancement.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:1318",
        "url": "https://access.redhat.com/errata/RHSA-2014:1318"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1111180",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1111180"
      },
      {
        "category": "external",
        "summary": "1134099",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
      },
      {
        "category": "external",
        "summary": "1141173",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141173"
      },
      {
        "category": "external",
        "summary": "1141210",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141210"
      },
      {
        "category": "external",
        "summary": "1141391",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141391"
      },
      {
        "category": "external",
        "summary": "1141400",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141400"
      },
      {
        "category": "external",
        "summary": "1141809",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1318.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Enterprise MRG Realtime 2.5 security and enhancement update",
    "tracking": {
      "current_release_date": "2025-11-21T17:50:06+00:00",
      "generator": {
        "date": "2025-11-21T17:50:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2014:1318",
      "initial_release_date": "2014-09-29T19:41:06+00:00",
      "revision_history": [
        {
          "date": "2014-09-29T19:41:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-09-29T19:41:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:50:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
                "product": {
                  "name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
                  "product_id": "6Server-MRG-Realtime-2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise MRG for RHEL-6"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla-debuginfo@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla-devel@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.10.33-rt32.51.el6rt?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.10.33-rt32.51.el6rt.src",
                "product": {
                  "name": "kernel-rt-0:3.10.33-rt32.51.el6rt.src",
                  "product_id": "kernel-rt-0:3.10.33-rt32.51.el6rt.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.10.33-rt32.51.el6rt?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
                "product": {
                  "name": "kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
                  "product_id": "kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-doc@3.10.33-rt32.51.el6rt?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
                "product": {
                  "name": "kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
                  "product_id": "kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-firmware@3.10.33-rt32.51.el6rt?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.33-rt32.51.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src"
        },
        "product_reference": "kernel-rt-0:3.10.33-rt32.51.el6rt.src",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch"
        },
        "product_reference": "kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3181",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2014-09-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1141173"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write flaw was found in the way the Apple Magic Mouse/Trackpad multi-touch driver handled Human Interface Device (HID) reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: OOB write in magicmouse driver",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with\nRed Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3181"
        },
        {
          "category": "external",
          "summary": "RHBZ#1141173",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141173"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3181"
        }
      ],
      "release_date": "2014-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: HID: OOB write in magicmouse driver"
    },
    {
      "cve": "CVE-2014-3182",
      "discovery_date": "2014-09-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1141210"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read flaw was found in the way the Logitech Unifying receiver driver handled HID reports with an invalid device_index value. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: logitech-dj OOB array access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with\nRed Hat Enterprise Linux 5 and 6.\n\nThis issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3182"
        },
        {
          "category": "external",
          "summary": "RHBZ#1141210",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141210"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3182"
        }
      ],
      "release_date": "2014-08-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Kernel: HID: logitech-dj OOB array access"
    },
    {
      "cve": "CVE-2014-3184",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2014-09-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1141391"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple out-of-bounds write flaws were found in the way the Cherry Cymotion keyboard driver, KYE/Genius device drivers, Logitech device drivers, Monterey Genius KB29E keyboard driver, Petalynx Maxter remote control driver, and Sunplus wireless desktop driver handled HID reports with an invalid report descriptor size. An attacker with physical access to the system could use either of these flaws to write data past an allocated memory buffer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: off by one error in various _report_fixup routines",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3184"
        },
        {
          "category": "external",
          "summary": "RHBZ#1141391",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141391"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3184",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3184"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3184",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3184"
        }
      ],
      "release_date": "2014-08-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.2,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Kernel: HID: off by one error in various _report_fixup routines"
    },
    {
      "cve": "CVE-2014-3185",
      "discovery_date": "2014-09-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1141400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption flaw was found in the way the USB ConnectTech WhiteHEAT serial driver processed completion commands sent via USB Request Blocks buffers. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: USB serial: memory corruption flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of the Linux kernel as shipped with\nRed Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel\nupdates for Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2 may\naddress this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-3185"
        },
        {
          "category": "external",
          "summary": "RHBZ#1141400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-3185",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-3185"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3185",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3185"
        }
      ],
      "release_date": "2014-08-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: USB serial: memory corruption flaw"
    },
    {
      "cve": "CVE-2014-4171",
      "discovery_date": "2014-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1111180"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition flaw was found in the way the Linux kernel\u0027s mmap(2), madvise(2), and fallocate(2) system calls interacted with each other while operating on virtual memory file system files. A local user could use this flaw to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: mm/shmem: denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.\n\nThis issue affects the version of the kernel package as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-4171"
        },
        {
          "category": "external",
          "summary": "RHBZ#1111180",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1111180"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-4171",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-4171"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-4171",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-4171"
        }
      ],
      "release_date": "2014-06-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: mm/shmem: denial of service"
    },
    {
      "cve": "CVE-2014-5471",
      "discovery_date": "2014-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1134099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the parse_rock_ridge_inode_internal() function of the Linux kernel\u0027s ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link (CL) tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the system or, potentially, escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: isofs: unbound recursion when processing relocated directories",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-5471"
        },
        {
          "category": "external",
          "summary": "RHBZ#1134099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-5471",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-5471"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5471",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5471"
        }
      ],
      "release_date": "2014-08-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: isofs: unbound recursion when processing relocated directories"
    },
    {
      "cve": "CVE-2014-5472",
      "discovery_date": "2014-08-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1134099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the parse_rock_ridge_inode_internal() function of the Linux kernel\u0027s ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link (CL) tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the system or, potentially, escalate their privileges on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: isofs: unbound recursion when processing relocated directories",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-5472"
        },
        {
          "category": "external",
          "summary": "RHBZ#1134099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1134099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-5472",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-5472"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-5472",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5472"
        }
      ],
      "release_date": "2014-08-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: isofs: unbound recursion when processing relocated directories"
    },
    {
      "cve": "CVE-2014-6410",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2014-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1141809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel\u0027s Universal Disk Format (UDF) file system implementation processed indirect Information Control Blocks (ICBs). An attacker with physical access to the system could use a specially crafted UDF image to crash the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: udf: Avoid infinite loop when processing indirect ICBs",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-6410"
        },
        {
          "category": "external",
          "summary": "RHBZ#1141809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-6410",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-6410"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-6410",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6410"
        }
      ],
      "release_date": "2014-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-09-29T19:41:06+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:1318"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.10.33-rt32.51.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.51.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.10.33-rt32.51.el6rt.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "kernel: udf: Avoid infinite loop when processing indirect ICBs"
    }
  ]
}