PT-2008-6968 · Opensuse+2 · Opensuse+2

Eugene Teo · Published 1970-01-01 · Updated 2017-08-08 · CVE-2008-4410

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions openSUSE kernel-rt debug (affected versions not specified) openSUSE kernel-rt (affected versions not specified) Linux kernel version 2.6.26.5

Description The issue involves multiple vulnerabilities in the kernel-rt and kernel-rt debug packages of the openSUSE operating system, which can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. Additionally, a specific vulnerability in the Linux kernel version 2.6.26.5 allows local users to cause a denial of service via crafted function calls, related to improper LDT selector state in the Java Runtime Environment.

Recommendations For openSUSE kernel-rt debug, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For openSUSE kernel-rt, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Linux kernel version 2.6.26.5, consider restricting access to the vmi write ldt entry function in arch/x86/kernel/vmi 32.c to minimize the risk of exploitation.

RCE

Weakness Enumeration

CWE-264

CWE-20

Related Identifiers

BDU:2015-05034

BDU:2015-05035

CVE-2008-4410

Affected Products

Java Runtime Environment

Linux Kernel

Opensuse

References · 14

• https://redhat.com/archives/fedora-package-announce/2008-October/msg00693.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4410 · Security Note
• https://bdu.fstec.ru/vul/2015-05035 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00689.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05034 · Security Note
• http://securityfocus.com/bid/31565 · Note
• http://secunia.com/advisories/32124 · Note
• http://secunia.com/advisories/32386 · Note
• http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=de59985e3a623d4d5d6207f1777398ca0606ab1c · Note
• http://osvdb.org/48743 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45687 · Note
• http://openwall.com/lists/oss-security/2008/10/03/3 · Note
• https://suse.com/support/security/advisories/2008_53_kernel.html · Note