PT-2013-6342 · Suse+2 · Kernel-Pae-Devel+7

Publicado 1970-01-01 · Atualizado 2017-08-29 · CVE-2014-1444

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise kernel-ec2-devel (affected versions not specified) SUSE Linux Enterprise kernel-pae-devel (affected versions not specified) SUSE Linux Enterprise kernel-xen-devel (affected versions not specified) Linux kernel versions prior to 3.11.7 SUSE Linux Enterprise gfs2-kmp-xen (affected versions not specified)

Description The issue concerns multiple vulnerabilities in various packages of the SUSE Linux Enterprise operating system, including kernel-ec2-devel, kernel-pae-devel, kernel-xen-devel, and gfs2-kmp-xen. These vulnerabilities can be exploited remotely and may lead to a breach of confidentiality, integrity, and availability of protected information. A specific vulnerability in the Linux kernel before version 3.11.7 involves the fst get iface function in drivers/net/wan/farsync.c, which does not properly initialize a certain data structure. This allows local users with the CAP NET ADMIN capability to obtain sensitive information from kernel memory by leveraging an SIOCWANDEV ioctl call.

Recommendations For SUSE Linux Enterprise kernel-ec2-devel, consider disabling vulnerable functions until a patch is available. For SUSE Linux Enterprise kernel-pae-devel, restrict access to vulnerable modules to minimize the risk of exploitation. For SUSE Linux Enterprise kernel-xen-devel, avoid using vulnerable parameters in affected API endpoints until the issue is resolved. For Linux kernel versions prior to 3.11.7, update to version 3.11.7 or later to resolve the issue. For SUSE Linux Enterprise gfs2-kmp-xen, consider disabling the vulnerable gfs2-kmp-xen module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability in some of the affected packages.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2013-1053

ALT-PU-2014-1422

BDU:2015-04307

BDU:2015-04308

BDU:2015-04309

BDU:2015-04310

CVE-2014-1444

DSA-2906-1

OPENSUSE-SU-2014_0677-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2040-1

USN-2042-1

USN-2049-1

USN-2050-1

USN-2066-1

USN-2067-1

USN-2069-1

USN-2128-1

USN-2129-1

Produtos afetados

Alt Linux

Linux Kernel

Suse Linux Enterprise

Suse

Gfs2-Kmp-Xen

Kernel-Ec2-Devel

Kernel-Pae-Devel

Kernel-Xen-Devel

Referências · 237

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• https://github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00 · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/929473ea05db455ad88cdc081f2adc556b8dc48f · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/201f99f170df14ba52ea4c52847779042b7a623b · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/e93b7d748be887cd7639b113ba7d7ef792a7efb9 · Nota
• https://github.com/torvalds/linux/commit/2433c8f094a008895e66f25bd1773cdb01c91d01 · Nota