{"affected":[{"ecosystem_specific":{"binaries":[{"kgraft-patch-3_12_61-52_69-default":"2-4.1","kgraft-patch-3_12_61-52_69-xen":"2-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"kgraft-patch-SLE12_Update_20","purl":"purl:rpm/suse/kgraft-patch-SLE12_Update_20&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2-4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kgraft-patch-3_12_61-52_69-default":"2-4.1","kgraft-patch-3_12_61-52_69-xen":"2-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","name":"kgraft-patch-SLE12_Update_20","purl":"purl:rpm/suse/kgraft-patch-SLE12_Update_20&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2-4.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update the for Linux Kernel 3.12.61-52.69 fixes one issue.\n\nThe following security bug was fixed:\n\n- CVE-2017-5970: The ipv4_pktinfo_prepare function in\n  net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a\n  denial of service (system crash) via (1) an application that made\n  crafted system calls or possibly (2) IPv4 traffic with invalid IP\n  options (bsc#1025013).\n- CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1030575, bsc#1031660).\n","id":"SUSE-SU-2017:1281-1","modified":"2017-05-15T15:58:36Z","published":"2017-05-15T15:58:36Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171281-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1025013"},{"type":"REPORT","url":"https://bugzilla.suse.com/1030575"},{"type":"REPORT","url":"https://bugzilla.suse.com/1031660"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-5970"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-7308"}],"related":["CVE-2017-5970","CVE-2017-7308"],"summary":"Security update for Linux Kernel Live Patch 20 for SLE 12"}