PT-2008-6956 · Linux+2 · Linux Kernel+5

Ramon De Carvalho Valle · Published 1970-01-01 · Updated 2023-02-13 · CVE-2009-2407

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise kernel-default-base (affected versions not specified) openSUSE kernel-pseries64 (affected versions not specified) openSUSE kernel-s390-debug (affected versions not specified) openSUSE kernel-smp-debuginfo (affected versions not specified) SUSE Linux Enterprise kernel-pae (affected versions not specified) SUSE Linux Enterprise kernel-default-debugsource (affected versions not specified) openSUSE kernel-pmac64 (affected versions not specified) Linux kernel versions prior to 2.6.30.4 openSUSE kexec-tools (affected versions not specified) SUSE Linux Enterprise cluster-network-kmp-pae (affected versions not specified) openSUSE appleir-kmp-debug (affected versions not specified) SUSE Linux Enterprise kernel-pae-extra (affected versions not specified) openSUSE kernel-xenpae (affected versions not specified) SUSE Linux Enterprise kernel-pae-base (affected versions not specified) openSUSE kernel-s390x (affected versions not specified) openSUSE kernel-s390x-debug (affected versions not specified) openSUSE kernel-64k-pagesize (affected versions not specified) openSUSE acx-kmp-debug (affected versions not specified) openSUSE pcc-acpi-kmp-debug (affected versions not specified) openSUSE kexec-tools-debuginfo (affected versions not specified) SUSE Linux Enterprise kernel-ec2-base (affected versions not specified) openSUSE um-host-install-initrd (affected versions not specified) openSUSE kernel-vmipae (affected versions not specified) SUSE Linux Enterprise ext4dev-kmp-default (affected versions not specified) openSUSE kernel-iseries64-debuginfo (affected versions not specified) openSUSE um-host-kernel (affected versions not specified) openSUSE kernel-smp (affected versions not specified) SUSE Linux Enterprise kernel-ec2 (affected versions not specified) SUSE Linux Enterprise ocfs2-kmp-xen (affected versions not specified) SUSE Linux Enterprise ocfs2-kmp-default (affected versions not specified) SUSE Linux Enterprise cluster-network-kmp-xen (affected versions not specified) openSUSE kernel-um (affected versions not specified) openSUSE uvcvideo-kmp-debug (affected versions not specified) SUSE Linux Enterprise ext4dev-kmp-ppc64 (affected versions not specified) openSUSE kernel-iseries64 (affected versions not specified) SUSE Linux Enterprise kernel-default-extra (affected versions not specified) openSUSE acerhk-kmp-debug (affected versions not specified) openSUSE kernel-sn2 (affected versions not specified) openSUSE kernel-s390 (affected versions not specified) SUSE Linux Enterprise kernel-xen-base (affected versions not specified) openSUSE wlan-ng-kmp-debug (affected versions not specified) SUSE Linux Enterprise kexec-tools-debuginfo (affected versions not specified) openSUSE kernel-xenpae-debuginfo (affected versions not specified) SUSE Linux Enterprise kernel-ppc64-debugsource (affected versions not specified) SUSE Linux Enterprise kernel-xen-extra (affected versions not specified) SUSE Linux Enterprise kernel-kdump-debugsource (affected versions not specified) openSUSE tpctl-kmp-debug (affected versions not specified) SUSE Linux Enterprise cluster-network-kmp-default (affected versions not specified) openSUSE gspcav-kmp-debug (affected versions not specified) openSUSE kernel-bigsmp (affected versions not specified) SUSE Linux Enterprise ocfs2-kmp-pae (affected versions not specified) openSUSE kernel-bigsmp-debuginfo (affected versions not specified) openSUSE nouveau-kmp-debug (affected versions not specified) SUSE Linux Enterprise kernel-ppc64-base (affected versions not specified) openSUSE at76 usb-kmp-debug (affected versions not specified) openSUSE atl2-kmp-debug (affected versions not specified)

Description The issue involves multiple vulnerabilities in various kernel packages of SUSE Linux Enterprise and openSUSE operating systems. These vulnerabilities can be exploited remotely, potentially leading to a denial of service or disruption of protected information. The vulnerabilities are related to a heap-based buffer overflow in the parse tag 3 packet function in the eCryptfs subsystem of the Linux kernel. This can cause a system crash or possibly allow local users to gain privileges via crafted eCryptfs files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Weakness Enumeration

CWE-399

CWE-119

Related Identifiers

BDU:2015-04245

BDU:2015-04246

BDU:2015-04247

BDU:2015-04248

BDU:2015-04249

BDU:2015-04250

BDU:2015-04251

BDU:2015-04252

BDU:2015-04253

BDU:2015-04254

BDU:2015-04255

BDU:2015-04256

BDU:2015-04257

BDU:2015-04258

BDU:2015-04259

BDU:2015-04260

BDU:2015-04261

BDU:2015-04262

BDU:2015-04263

BDU:2015-04264

BDU:2015-04265

BDU:2015-04266

BDU:2015-05141

BDU:2015-05142

BDU:2015-05143

BDU:2015-05144

BDU:2015-05145

BDU:2015-05146

BDU:2015-05147

BDU:2015-05148

BDU:2015-05149

BDU:2015-05150

BDU:2015-05151

BDU:2015-05152

BDU:2015-05153

BDU:2015-05154

BDU:2015-05155

BDU:2015-05156

BDU:2015-05157

BDU:2015-05158

BDU:2015-05159

BDU:2015-05160

BDU:2015-05161

BDU:2015-05162

BDU:2015-05163

BDU:2015-05164

BDU:2015-05165

BDU:2015-05166

BDU:2015-05167

BDU:2015-05168

BDU:2015-05169

BDU:2015-05170

BDU:2015-05171

BDU:2015-05172

BDU:2015-05173

CVE-2009-2407

DSA-1844-1

DSA-1845-1

RHSA-2009:1193

RHSA-2009_1193

Affected Products

Linux Kernel

Red Hat

Suse Linux Enterprise

Ecryptfs

Kexec-Tools

Opensuse

References · 124

• 🔥 http://risesecurity.org/advisories/RISE-2009003.txt · Exploit
• http://vupen.com/english/advisories/2009/2041 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05238 · Security Note
• https://bdu.fstec.ru/vul/2015-04262 · Security Note
• https://bdu.fstec.ru/vul/2015-05149 · Security Note
• https://bdu.fstec.ru/vul/2015-05231 · Security Note
• https://bdu.fstec.ru/vul/2015-05142 · Security Note
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05145 · Security Note
• https://bdu.fstec.ru/vul/2015-05144 · Security Note
• https://bdu.fstec.ru/vul/2015-05147 · Security Note
• https://bdu.fstec.ru/vul/2015-04261 · Security Note
• http://secunia.com/advisories/36051 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04248 · Security Note
• https://bdu.fstec.ru/vul/2015-05220 · Security Note