| Beschreibung: | Summary:
The remote host is missing an update for the 'kernel'
package(s) announced via the referenced advisory.
Vulnerability Insight:
The openSUSE 11.2 kernel was updated to fix lots of security issues.
This will probably be the last 11.2 kernel update released by the
SUSE Security Team, as our support for 11.2 ends in 1 month.
The following security issues were fixed:
CVE-2011-1493: In the rose networking stack, when parsing the
FAC_NATIONAL_DIGIS facilities field, it was possible for a remote
host to provide more digipeaters than expected, resulting in heap
corruption. Check against ROSE_MAX_DIGIS to prevent overflows,
and abort facilities parsing on failure.
CVE-2011-1182: Local attackers could send signals to their programs
that looked like coming from the kernel, potentially gaining privileges
in the context of setuid programs.
CVE-2011-1082: The epoll subsystem in Linux did not prevent users
from creating circular epoll file structures, potentially leading to
a denial of service (kernel deadlock).
CVE-2011-1163: The code for evaluating OSF partitions (in
fs/partitions/osf.c) contained a bug that leaks data from kernel heap
memory to userspace for certain corrupted OSF partitions.
CVE-2011-1012: The code for evaluating LDM partitions (in
fs/partitions/ldm.c) contained a bug that could crash the kernel for
certain corrupted LDM partitions.
CVE-2011-1010: The code for evaluating Mac partitions (in
fs/partitions/mac.c) contained a bug that could crash the kernel for
certain corrupted Mac partitions.
CVE-2011-1476: Specially crafted requests may be written to
/dev/sequencer resulting in an underflow when calculating a size for a
copy_from_user() operation in the driver for MIDI interfaces. On x86,
this just returns an error, but it could have caused memory corruption
on other architectures. Other malformed requests could have resulted
in the use of uninitialized variables.
CVE-2011-1477: Due to a failure to validate user-supplied indexes in
the driver for Yamaha YM3812 and OPL-3 chips, a specially crafted
ioctl request could have been sent to /dev/sequencer, resulting in
reading and writing beyond the bounds of heap buffers, and potentially
allowing privilege escalation.
CVE-2011-1090: A page allocator issue in NFS v4 ACL handling that
could lead to a denial of service (crash) was fixed.
CVE-2010-3880: net/ipv4/inet_diag.c in the Linux kernel did not
properly audit INET_DIAG bytecode, which allowed local users
to cause a denial of service (kernel infinite loop) via crafted
INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains
multiple attribute elements, as demonst ...
Description truncated, please see the referenced URL(s) for more information.
Vulnerability Impact:
local privilege escalation, remote denial of service
Affected Software/OS:
kernel on openSUSE 11.2
Solution:
Please install the updated packages.
CVSS Score:
8.3
CVSS Vector:
AV:A/AC:L/Au:N/C:C/I:C/A:C
|
