PT-2009-6756 · Intel+9 · Intel-Iamt-Heci-Kmp-Debug+18

Eugene Teo · Published 1970-01-01 · Updated 2018-10-10 · CVE-2009-1337

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions dazuko-kmp-debug (affected versions not specified) intel-iamt-heci-kmp-trace (affected versions not specified) kvm-kmp-trace (affected versions not specified) ofed-kmp-debug (affected versions not specified) aufs-kmp-debug (affected versions not specified) kqemu-kmp-debug (affected versions not specified) drbd-kmp-debug (affected versions not specified) ofed-kmp-trace (affected versions not specified) iscsitarget-kmp-trace (affected versions not specified) pcfclock-kmp-trace (affected versions not specified) intel-iamt-heci-kmp-debug (affected versions not specified) kqemu-kmp-trace (affected versions not specified) dazuko-kmp-trace (affected versions not specified) drbd-kmp-trace (affected versions not specified) iscsitarget-kmp-debug (affected versions not specified) pcfclock-kmp-debug (affected versions not specified) aufs-kmp-trace (affected versions not specified)

Description The issue concerns multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to disruption of protected information availability. These vulnerabilities can be exploited remotely. The exit notify function in the Linux kernel is also mentioned, which does not restrict exit signals when the CAP KILL capability is held, allowing local users to send arbitrary signals to a process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-05202

BDU:2015-05203

BDU:2015-05204

BDU:2015-05205

BDU:2015-05206

BDU:2015-05207

BDU:2015-05208

BDU:2015-05209

BDU:2015-05210

BDU:2015-05211

BDU:2015-05212

BDU:2015-05213

BDU:2015-05214

BDU:2015-05215

BDU:2015-05216

BDU:2015-05217

BDU:2015-05218

CVE-2009-1337

DSA-1787-1

DSA-1794-1

DSA-1800-1

RHSA-2009:0451

RHSA-2009:0473

RHSA-2009:1024

RHSA-2009:1077

RHSA-2009:1550

RHSA-2009_0473

RHSA-2009_1024

Affected Products

Linux Kernel

Red Hat

Aufs-Kmp-Debug

Aufs-Kmp-Trace

Dazuko-Kmp-Debug

Dazuko-Kmp-Trace

Drbd-Kmp-Debug

Drbd-Kmp-Trace

Intel-Iamt-Heci-Kmp-Debug

Intel-Iamt-Heci-Kmp-Trace

Iscsitarget-Kmp-Debug

Iscsitarget-Kmp-Trace

Kqemu-Kmp-Debug

Kqemu-Kmp-Trace

Kvm-Kmp-Trace

Ofed-Kmp-Debug

Ofed-Kmp-Trace

Pcfclock-Kmp-Debug

Pcfclock-Kmp-Trace

References · 76

• 🔥 https://exploit-db.com/exploits/8369 · Exploit
• https://bdu.fstec.ru/vul/2015-05212 · Security Note
• http://debian.org/security/2009/dsa-1800 · Vendor Advisory
• http://debian.org/security/2009/dsa-1787 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05218 · Security Note
• http://redhat.com/support/errata/RHSA-2009-1077.html · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05208 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-1024.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05217 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-May/msg01126.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0451.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05203 · Security Note
• https://bdu.fstec.ru/vul/2015-05211 · Security Note