Citrix XenServer

ソフト名：Citrix XenServer 5.0/5.5/5.6 SP2 (Kernel.org Linux Kernel 2.6.x, Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x, XenSource. Inc. Xen 3.x/4.x)

回避策：あり

脆弱性：権限の昇格, DoS攻撃, システムアクセス, 不正パケット, カーネルのクラッシュ, メモリの浪費, カーネルメモリ破壊, 応答処理の脆弱性, , 整数オーバーフローエラー, バッファオーバーフロー, リモートコード実行, 解凍エラー, 無限ループ, メモリリーク, システムコール, アロケーションエラー, アウトオブメモリ, システムのクラッシュ, CPUリソースの浪費, , 入力検証エラー, ハイパーコール

ソース：

http://www.citrix.com/English/ps2/products/product.asp?contentID=683148

http://support.citrix.com/article/CTX130325

http://secunia.com/advisories/39080/

http://secunia.com/advisories/43009/

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44502/

http://secunia.com/advisories/45746/

http://secunia.com/advisories/45835/

http://secunia.com/advisories/45880/

http://dvw-j.blogspot.com/2011/01/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://dvw-j.blogspot.com/2011/05/xensource-incxen-red-hat-enterprise.html

http://dvw-j.blogspot.com/2011/08/red-hat-enterprise-linux_26.html

http://dvw-j.blogspot.com/2011/09/xensource-inc-xen.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1583

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1898

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2901

CVE：CVE-2010-4251, CVE-2011-0997, CVE-2011-1478, CVE-2011-1583, CVE-2011-1898, CVE-2011-2901

危険性：Medium Risk

Red Hat Fedora, Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Red Hat Fedora 14, Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1)

回避策：FEDORA-2011-10705にて対応, openSUSE-SU-2011:1021-1, SUSE-SU-2011:1023-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://fedoraproject.org/

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html

http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html

https://hermes.opensuse.org/messages/11695711

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45817/

http://secunia.com/advisories/45918/

http://dvw-j.blogspot.com/2011/08/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux, Red Hat Desktop, Red Hat Enterprise Linux

ソフト名：Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10, Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1)

回避策：USN-1190-1にて対応, RHSA-2011:1160-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://www.ubuntu.com/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://www.ubuntu.com/usn/usn-1190-1/

http://rhn.redhat.com/errata/RHSA-2011-1160.html

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45629/

http://secunia.com/advisories/45639/

http://dvw-j.blogspot.com/2011/08/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Internet Software Consortium ISC DHCP, Debian GNU/Linux

ソフト名：Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1, Debian GNU/Linux 5.0/6.0

回避策：3.1-ESV-R3/4.1-ESV-R3/4.2.2へのアップデートにて対応, DSA-2292-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://www.isc.org/software/dhcp

http://www.debian.org/

https://www.isc.org/software/dhcp/advisories/cve-2011-2748

http://lists.debian.org/debian-security-announce/2011/msg00166.html

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45595/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

NetBSD

ソフト名：NetBSD 4.0 (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x)

回避策：NetBSD-SA2011-005にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://www.netbsd.org/releases/formal-4/NetBSD-4.0.html

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-005.txt.asc

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44371/

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 13 (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x)

回避策：FEDORA-2011-0848にて対応

脆弱性：DoS攻撃, システムアクセス, アサーションエラー, サービスのクラッシュ, 応答処理の脆弱性, シェルコマンド実行

ソース：https://fedoraproject.org/wiki/F13_one_page_release_notes

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058455.html

http://secunia.com/advisories/43006/

http://secunia.com/advisories/44037/

http://dvw-j.blogspot.com/2011/01/isc-dhcp.html

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0413

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0413, CVE-2011-0997

危険性：Medium Risk

SUSE Linux Enterprise Server

ソフト名：SUSE Linux Enterprise Server (SLES) 10 (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x)

回避策：SUSE-SU-2011:0305-5にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://www.novell.com/products/server/

https://hermes.opensuse.org/messages/8086792

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44179/

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14 (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x)

回避策：FEDORA-2011-4897にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44180/

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk

Red Hat Desktop, Red Hat Enterprise Linux, Debian GNU/Linux, Canonical Ltd. Ubuntu Linux

ソフト名：Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Debian GNU/Linux 5.0/6.0 (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x), Canonical Ltd. Ubuntu Linux 6.06/8.04/9.10/10.04/10.10

回避策：RHSA-2011:0428-1にて対応, DSA-2216-1, DSA-2217-1にて対応, USN-1108-1にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://debian.org/

http://www.ubuntu.com/

http://rhn.redhat.com/errata/RHSA-2011-0428.html

http://www.debian.org/security/2011/dsa-2216

http://www.debian.org/security/2011/dsa-2217

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-April/001302.html

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44089/

http://secunia.com/advisories/44090/

http://secunia.com/advisories/44103/

http://secunia.com/advisories/44127/

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server, Novell Open Enterprise Server

ソフト名：Novell openSUSE 11.2/11.3/11.4, Novell SUSE Linux Enterprise Server 9/10/11, Novell Open Enterprise Server 1.x/2.x (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x)

回避策：SUSE-SU-2011:0305-1, SUSE-SU-2011:0322-1, SUSE-SU-2011:0323-1, openSUSE-SU-2011:0320-1, openSUSE-SU-2011:0321-1にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://www.opensuse.org/en/

http://www.novell.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/7849431

https://hermes.opensuse.org/messages/7881491

https://hermes.opensuse.org/messages/7882506

https://hermes.opensuse.org/messages/7877910

https://hermes.opensuse.org/messages/7877925

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44011/

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk

Internet Software Consortium ISC DHCP, Slackware Linux

ソフト名：Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x, Slackware Linux 9.0/9.1/10.0/11.0

回避策：アップデートにて対応, SSA:2011-097-01にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://www.isc.org/products/DHCP/

http://www.slackware.com/

https://www.isc.org/software/dhcp/advisories/cve-2011-0997

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44048/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk