PT-2007-7540 · Opensuse+1 · P54-Kmp+4

Published 1970-01-01 · Updated 2023-02-13 · CVE-2007-5501

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.21 through 2.6.23.7 Linux kernel versions 2.6.24-rc through 2.6.24-rc2 p54-kmp-bigsmp versions (affected versions not specified) p54-kmp-default versions (affected versions not specified) p54-kmp-debug versions (affected versions not specified) p54-kmp-xen versions (affected versions not specified) p54-kmp-xenpae versions (affected versions not specified) adm8211-kmp-bigsmp versions (affected versions not specified) adm8211-kmp-default versions (affected versions not specified) adm8211-kmp-debug versions (affected versions not specified) adm8211-kmp-ppc64 versions (affected versions not specified) adm8211-kmp-xen versions (affected versions not specified) adm8211-kmp-xenpae versions (affected versions not specified) rt2x00-kmp-bigsmp versions (affected versions not specified) rt2x00-kmp-debug versions (affected versions not specified) rt2x00-kmp-default versions (affected versions not specified) rt2x00-kmp-xen versions (affected versions not specified) rt2x00-kmp-xenpae versions (affected versions not specified) rtl8187-kmp-bigsmp versions (affected versions not specified) rtl8187-kmp-debug versions (affected versions not specified) rtl8187-kmp-default versions (affected versions not specified) rtl8187-kmp-xen versions (affected versions not specified) rtl8187-kmp-xenpae versions (affected versions not specified)

Description The issue is related to multiple vulnerabilities in various packages of the openSUSE operating system, including p54-kmp, adm8211-kmp, rt2x00-kmp, and rtl8187-kmp. These vulnerabilities can be exploited remotely, leading to a disruption of protected information. Additionally, a vulnerability in the Linux kernel's tcp sacktag write queue function allows remote attackers to cause a denial of service via crafted ACK responses.

Recommendations As a temporary workaround, consider disabling the tcp sacktag write queue function until a patch is available. For Linux kernel versions 2.6.21 through 2.6.23.7 and 2.6.24-rc through 2.6.24-rc2, update to a newer version to mitigate the risk. For p54-kmp, adm8211-kmp, rt2x00-kmp, and rtl8187-kmp packages, restrict access to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability in the p54-kmp, adm8211-kmp, rt2x00-kmp, and rtl8187-kmp packages.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-04985

BDU:2015-04986

BDU:2015-04987

BDU:2015-04988

BDU:2015-04989

BDU:2015-04990

BDU:2015-04991

BDU:2015-04992

BDU:2015-04993

BDU:2015-04994

BDU:2015-04995

BDU:2015-04996

BDU:2015-04997

BDU:2015-04998

BDU:2015-04999

BDU:2015-05000

BDU:2015-05001

BDU:2015-05002

BDU:2015-05003

BDU:2015-05004

BDU:2015-05005

CVE-2007-5501

Affected Products

Linux Kernel

Adm8211-Kmp

P54-Kmp

Rt2X00-Kmp

Rtl8187-Kmp

References · 47

• https://bdu.fstec.ru/vul/2015-05000 · Security Note
• http://securityfocus.com/bid/26474 · Patch
• https://bdu.fstec.ru/vul/2015-04987 · Security Note
• http://novell.com/linux/security/advisories/2007_63_kernel.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04985 · Security Note
• https://bdu.fstec.ru/vul/2015-05005 · Security Note
• https://bdu.fstec.ru/vul/2015-05004 · Security Note
• http://ubuntu.com/usn/usn-574-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04988 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-December/msg00032.html · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 · Vendor Advisory
• http://secunia.com/advisories/28706 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04996 · Security Note
• https://bdu.fstec.ru/vul/2015-04990 · Security Note
• http://secunia.com/advisories/27664 · Vendor Advisory