PT-2008-6950 · Opensuse+2 · Ocfs2-Kmp-Pae+62

Michael Tokarev · Publicado 1970-01-01 · Atualizado 2023-02-13 · CVE-2009-1389

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions openSUSE kernel-ppc64-extra (affected versions not specified) openSUSE kernel-pseries64 (affected versions not specified) openSUSE kernel-s390-debug (affected versions not specified) openSUSE kernel-smp-debuginfo (affected versions not specified) openSUSE kernel-xen-extra (affected versions not specified) SUSE Linux Enterprise kernel-default-base (affected versions not specified) SUSE Linux Enterprise kernel-pae (affected versions not specified) SUSE Linux Enterprise kernel-pae-base (affected versions not specified) openSUSE kernel-ppc64 (affected versions not specified) openSUSE kernel-ppc64-base (affected versions not specified) openSUSE kernel-ppc64-debuginfo (affected versions not specified) openSUSE kernel-ppc64-debugsource (affected versions not specified) SUSE Linux Enterprise kernel-ppc64-debugsource (affected versions not specified) openSUSE kernel-s390 (affected versions not specified) openSUSE kernel-s390x (affected versions not specified) openSUSE kernel-s390x-debug (affected versions not specified) openSUSE kernel-xenpae (affected versions not specified) openSUSE kernel-xenpae-debuginfo (affected versions not specified) SUSE Linux Enterprise kernel-xen-extra (affected versions not specified) openSUSE kernel-default-extra (affected versions not specified) SUSE Linux Enterprise kernel-default-extra (affected versions not specified) openSUSE kernel-kdump (affected versions not specified) openSUSE kernel-kdump-debuginfo (affected versions not specified) openSUSE kernel-kdump-debugsource (affected versions not specified) SUSE Linux Enterprise kernel-kdump-debugsource (affected versions not specified) openSUSE kernel-source-debuginfo (affected versions not specified) openSUSE kernel-sn2 (affected versions not specified) openSUSE kernel-vmipae (affected versions not specified) openSUSE kernel-bigsmp (affected versions not specified) openSUSE kernel-bigsmp-debuginfo (affected versions not specified) openSUSE ocfs2-kmp-ppc64 (affected versions not specified) openSUSE ocfs2-kmp-xen (affected versions not specified) SUSE Linux Enterprise ocfs2-kmp-xen (affected versions not specified) openSUSE ocfs2-kmp-pae (affected versions not specified) SUSE Linux Enterprise ocfs2-kmp-pae (affected versions not specified) openSUSE ocfs2-kmp-default (affected versions not specified) SUSE Linux Enterprise ocfs2-kmp-default (affected versions not specified) openSUSE ext4dev-kmp-ppc64 (affected versions not specified) SUSE Linux Enterprise ext4dev-kmp-ppc64 (affected versions not specified) openSUSE ext4dev-kmp-default (affected versions not specified) SUSE Linux Enterprise ext4dev-kmp-default (affected versions not specified) openSUSE ext4dev-kmp-xen (affected versions not specified) openSUSE ext4dev-kmp-vmi (affected versions not specified) openSUSE cluster-network-kmp-xen (affected versions not specified) SUSE Linux Enterprise cluster-network-kmp-xen (affected versions not specified) openSUSE cluster-network-kmp-ppc64 (affected versions not specified) openSUSE cluster-network-kmp-pae (affected versions not specified) openSUSE cluster-network-kmp-default (affected versions not specified) SUSE Linux Enterprise cluster-network-kmp-default (affected versions not specified) openSUSE kexec-tools (affected versions not specified) SUSE Linux Enterprise kexec-tools-debuginfo (affected versions not specified) openSUSE kexec-tools-debuginfo (affected versions not specified) openSUSE appleir-kmp-debug (affected versions not specified) openSUSE acx-kmp-debug (affected versions not specified) openSUSE pcc-acpi-kmp-debug (affected versions not specified) openSUSE uvcvideo-kmp-debug (affected versions not specified) openSUSE acerhk-kmp-debug (affected versions not specified) openSUSE wlan-ng-kmp-debug (affected versions not specified) openSUSE gspcav-kmp-debug (affected versions not specified) openSUSE at76 usb-kmp-debug (affected versions not specified) openSUSE atl2-kmp-debug (affected versions not specified) openSUSE tpctl-kmp-debug (affected versions not specified) openSUSE nouveau-kmp-debug (affected versions not specified) openSUSE um-host-install-initrd (affected versions not specified) openSUSE um-host-kernel (affected versions not specified) openSUSE kernel-iseries64 (affected versions not specified) openSUSE kernel-iseries64-debuginfo (affected versions not specified) openSUSE kernel-ec2 (affected versions not specified) SUSE Linux Enterprise kernel-ec2 (affected versions not specified) openSUSE kernel-ec2-base (affected versions not specified) SUSE Linux Enterprise kernel-xen-base (affected versions not specified) openSUSE kernel-64k-pagesize (affected versions not specified) openSUSE kernel-default-man (affected versions not specified) openSUSE kernel-smp (affected versions not specified) openSUSE kernel-trace-extra (affected versions not specified) openSUSE kernel-debug-extra (affected versions not specified) openSUSE kernel-um (affected versions not specified) openSUSE kernel-ps3 (affected versions not specified)

Description The issue is related to multiple vulnerabilities in various kernel packages of openSUSE and SUSE Linux Enterprise operating systems. These vulnerabilities can be exploited remotely, leading to a denial of service (kernel memory corruption and crash) via a long packet. The vulnerabilities are present in different kernel packages, including kernel-ppc64-extra, kernel-pseries64, kernel-s390-debug, and others.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-399

CWE-119

CWE-189

Identificadores relacionados

BDU:2015-04245

BDU:2015-04246

BDU:2015-04247

BDU:2015-04248

BDU:2015-04249

BDU:2015-04250

BDU:2015-04251

BDU:2015-04252

BDU:2015-04253

BDU:2015-04254

BDU:2015-04255

BDU:2015-04256

BDU:2015-04257

BDU:2015-04258

BDU:2015-04259

BDU:2015-04260

BDU:2015-04261

BDU:2015-04262

BDU:2015-04263

BDU:2015-04264

BDU:2015-04265

BDU:2015-04266

BDU:2015-05141

BDU:2015-05142

BDU:2015-05143

BDU:2015-05144

BDU:2015-05145

BDU:2015-05146

BDU:2015-05147

BDU:2015-05148

BDU:2015-05149

BDU:2015-05150

BDU:2015-05151

BDU:2015-05152

BDU:2015-05153

BDU:2015-05154

BDU:2015-05155

BDU:2015-05156

BDU:2015-05157

BDU:2015-05158

BDU:2015-05159

BDU:2015-05160

BDU:2015-05161

BDU:2015-05162

BDU:2015-05163

BDU:2015-05164

BDU:2015-05165

BDU:2015-05166

BDU:2015-05167

BDU:2015-05168

BDU:2015-05169

BDU:2015-05170

BDU:2015-05171

BDU:2015-05172

BDU:2015-05173

BDU:2015-05219

BDU:2015-05220

BDU:2015-05221

BDU:2015-05222

BDU:2015-05223

BDU:2015-05224

BDU:2015-05225

BDU:2015-05226

BDU:2015-05227

BDU:2015-05228

BDU:2015-05229

BDU:2015-05230

BDU:2015-05231

BDU:2015-05232

BDU:2015-05233

BDU:2015-05234

BDU:2015-05235

BDU:2015-05236

BDU:2015-05237

BDU:2015-05238

BDU:2015-05239

BDU:2015-05240

BDU:2015-05241

BDU:2015-05242

BDU:2015-05243

BDU:2015-05244

BDU:2015-05245

BDU:2015-05246

BDU:2015-05247

CVE-2009-1389

DSA-1844-1

DSA-1865-1

RHSA-2009:1157

RHSA-2009:1193

RHSA-2009:1211

RHSA-2009:1457

RHSA-2009:1469

RHSA-2009_1193

RHSA-2009_1211

Produtos afetados

Red Hat

Acerhk-Kmp-Debug

Acx-Kmp-Debug

Appleir-Kmp-Debug

At76 Usb-Kmp-Debug

Atl2-Kmp-Debug

Cluster-Network-Kmp-Default

Cluster-Network-Kmp-Pae

Cluster-Network-Kmp-Ppc64

Cluster-Network-Kmp-Xen

Ext4Dev-Kmp-Default

Ext4Dev-Kmp-Ppc64

Ext4Dev-Kmp-Vmi

Ext4Dev-Kmp-Xen

Gspcav-Kmp-Debug

Kernel-64K-Pagesize

Kernel-Bigsmp

Kernel-Bigsmp-Debuginfo

Kernel-Debug-Extra

Kernel-Default-Base

Kernel-Default-Extra

Kernel-Default-Man

Kernel-Ec2

Kernel-Ec2-Base

Kernel-Iseries64

Kernel-Iseries64-Debuginfo

Kernel-Kdump

Kernel-Kdump-Debuginfo

Kernel-Kdump-Debugsource

Kernel-Pae

Kernel-Pae-Base

Kernel-Ppc64

Kernel-Ppc64-Base

Kernel-Ppc64-Debuginfo

Kernel-Ppc64-Debugsource

Kernel-Ppc64-Extra

Kernel-Ps3

Kernel-Pseries64

Kernel-S390X

Kernel-S390X-Debug

Kernel-Smp

Kernel-Smp-Debuginfo

Kernel-Sn2

Kernel-Source-Debuginfo

Kernel-Trace-Extra

Kernel-Um

Kernel-Vmipae

Kernel-Xen-Base

Kernel-Xen-Extra

Kernel-Xenpae

Kernel-Xenpae-Debuginfo

Kexec-Tools

Nouveau-Kmp-Debug

Ocfs2-Kmp-Default

Ocfs2-Kmp-Pae

Ocfs2-Kmp-Ppc64

Ocfs2-Kmp-Xen

Pcc-Acpi-Kmp-Debug

Tpctl-Kmp-Debug

Um-Host-Install-Initrd

Um-Host-Kernel

Uvcvideo-Kmp-Debug

Wlan-Ng-Kmp-Debug

Referências · 160

• 🔥 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=fdd7b4c3302c93f6833e338903ea77245eb510b4 · Exploit
• 🔥 http://lkml.org/lkml/2009/6/8/194 · Exploit
• https://bdu.fstec.ru/vul/2015-05238 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04262 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05231 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05149 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05142 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05218 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05145 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05144 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05208 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05147 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04261 · Nota de Segurança
• http://securityfocus.com/archive/1/505254/100/0/threaded · Nota
• http://risesecurity.org/advisories/RISE-2009002.txt · Nota