PT-2009-6754 · Intel+8 · Intel-Iamt-Heci-Kmp-Debug+17

Chuck Ebbert · Published 1970-01-01 · Updated 2020-08-27 · CVE-2009-1242

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions dazuko-kmp-debug (affected versions not specified) intel-iamt-heci-kmp-trace (affected versions not specified) ofed-kmp-debug (affected versions not specified) aufs-kmp-debug (affected versions not specified) kqemu-kmp-debug (affected versions not specified) drbd-kmp-debug (affected versions not specified) ofed-kmp-trace (affected versions not specified) iscsitarget-kmp-trace (affected versions not specified) pcfclock-kmp-trace (affected versions not specified) intel-iamt-heci-kmp-debug (affected versions not specified) kqemu-kmp-trace (affected versions not specified) dazuko-kmp-trace (affected versions not specified) drbd-kmp-trace (affected versions not specified) iscsitarget-kmp-debug (affected versions not specified) pcfclock-kmp-debug (affected versions not specified) aufs-kmp-trace (affected versions not specified) kvm-kmp-trace (affected versions not specified) Linux kernel versions prior to 2.6.29.1

Description The issue is related to multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a denial of service by disrupting the availability of protected information. These vulnerabilities can be exploited remotely. Additionally, a vulnerability in the Linux kernel's KVM subsystem allows guest OS users to cause a denial of service by setting a specific bit in the Extended Feature Enable Register.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-05202

BDU:2015-05203

BDU:2015-05204

BDU:2015-05205

BDU:2015-05206

BDU:2015-05207

BDU:2015-05208

BDU:2015-05209

BDU:2015-05210

BDU:2015-05211

BDU:2015-05212

BDU:2015-05213

BDU:2015-05214

BDU:2015-05215

BDU:2015-05216

BDU:2015-05217

BDU:2015-05218

CVE-2009-1242

DSA-1787-1

DSA-1800-1

Affected Products

Linux Kernel

Aufs-Kmp-Debug

Aufs-Kmp-Trace

Dazuko-Kmp-Debug

Dazuko-Kmp-Trace

Drbd-Kmp-Debug

Drbd-Kmp-Trace

Intel-Iamt-Heci-Kmp-Debug

Intel-Iamt-Heci-Kmp-Trace

Iscsitarget-Kmp-Debug

Iscsitarget-Kmp-Trace

Kqemu-Kmp-Debug

Kqemu-Kmp-Trace

Kvm-Kmp-Trace

Ofed-Kmp-Debug

Ofed-Kmp-Trace

Pcfclock-Kmp-Debug

Pcfclock-Kmp-Trace

References · 46

• https://bdu.fstec.ru/vul/2015-05212 · Security Note
• https://bdu.fstec.ru/vul/2015-05202 · Security Note
• http://debian.org/security/2009/dsa-1800 · Vendor Advisory
• http://debian.org/security/2009/dsa-1787 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05218 · Security Note
• http://openwall.com/lists/oss-security/2009/04/01/3 · Patch
• https://bdu.fstec.ru/vul/2015-05208 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05217 · Security Note
• https://bdu.fstec.ru/vul/2015-05209 · Security Note
• https://bdu.fstec.ru/vul/2015-05204 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-May/msg01126.html · Vendor Advisory
• http://patchwork.kernel.org/patch/15549 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05203 · Security Note
• https://bdu.fstec.ru/vul/2015-05206 · Security Note