PT-2011-5228 · Opensuse+5 · Systemtap-Client-Debuginfo+19

Prasad Pandit · Published 1970-01-01 · Updated 2023-02-13 · CVE-2013-1774

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions openSUSE systemtap-runtime-debuginfo (affected versions not specified) openSUSE systemtap-sdt-devel (affected versions not specified) openSUSE systemtap (affected versions not specified) openSUSE libvmtools0 (affected versions not specified) openSUSE systemtap-client (affected versions not specified) openSUSE systemtap-client-debuginfo (affected versions not specified) openSUSE kernel-vanilla-base-debuginfo (affected versions not specified) Linux kernel versions prior to 3.7.4 openSUSE systemtap-server-debuginfo (affected versions not specified) openSUSE libvmtools0-debuginfo (affected versions not specified) openSUSE systemtap-runtime (affected versions not specified) openSUSE kernel-vanilla-base (affected versions not specified) openSUSE systemtap-server (affected versions not specified) openSUSE systemtap-debuginfo (affected versions not specified) openSUSE libvmtools-devel (affected versions not specified) openSUSE systemtap-debugsource (affected versions not specified)

Description The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, including systemtap, libvmtools, and kernel-vanilla-base, which can lead to disruption of protected information availability. These vulnerabilities can be exploited remotely. Additionally, a vulnerability in the Linux kernel before version 3.7.4 allows local users to cause a denial of service via an attempted read or write operation on a disconnected Edgeport USB serial converter. The chase port function in drivers/usb/serial/io ti.c is specifically affected.

Recommendations For openSUSE systemtap-runtime-debuginfo, update to a version that includes the fix for this issue. For openSUSE systemtap-sdt-devel, update to a version that includes the fix for this issue. For openSUSE systemtap, update to a version that includes the fix for this issue. For openSUSE libvmtools0, update to a version that includes the fix for this issue. For openSUSE systemtap-client, update to a version that includes the fix for this issue. For openSUSE systemtap-client-debuginfo, update to a version that includes the fix for this issue. For openSUSE kernel-vanilla-base-debuginfo, update to a version that includes the fix for this issue. For Linux kernel, update to version 3.7.4 or later. For openSUSE systemtap-server-debuginfo, update to a version that includes the fix for this issue. For openSUSE libvmtools0-debuginfo, update to a version that includes the fix for this issue. For openSUSE systemtap-runtime, update to a version that includes the fix for this issue. For openSUSE kernel-vanilla-base, update to a version that includes the fix for this issue. For openSUSE systemtap-server, update to a version that includes the fix for this issue. For openSUSE systemtap-debuginfo, update to a version that includes the fix for this issue. For openSUSE libvmtools-devel, update to a version that includes the fix for this issue. For openSUSE systemtap-debugsource, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the affected packages until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-189

CWE-119

CWE-264

Related Identifiers

ALT-PU-2013-1178

BDU:2015-05303

BDU:2015-05304

BDU:2015-05305

BDU:2015-05306

BDU:2015-05307

BDU:2015-05308

BDU:2015-05309

BDU:2015-05310

BDU:2015-05311

BDU:2015-05312

BDU:2015-05313

BDU:2015-05314

BDU:2015-05315

BDU:2015-05542

BDU:2015-05543

CESA-2013_0744

CVE-2013-1774

DSA-2668-1

OPENSUSE-SU-2013_0847-1

OPENSUSE-SU-2013_0925-1

RHSA-2013:0744

RHSA-2013:0829

RHSA-2013_0744

SUSE-RU-2015:0621-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-1743-1

USN-1744-1

USN-1745-1

USN-1767-1

USN-1781-1

USN-1805-1

USN-1808-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Kernel-Vanilla-Base

Kernel-Vanilla-Base-Debuginfo

Libvmtools-Devel

Libvmtools0

Libvmtools0-Debuginfo

Systemtap

Systemtap-Client

Systemtap-Client-Debuginfo

Systemtap-Debuginfo

Systemtap-Debugsource

Systemtap-Runtime

Systemtap-Runtime-Debuginfo

Systemtap-Sdt-Devel

Systemtap-Server

Systemtap-Server-Debuginfo

References · 55

• 🔥 https://github.com/realtalk/cve-2013-2094 · Exploit
• 🔥 https://github.com/hiikezoe/libperf_event_exploit · Exploit
• 🔥 https://github.com/Pashkela/CVE-2013-2094 · Exploit
• 🔥 https://github.com/timhsutw/cve-2013-2094 · Exploit
• 🔥 https://github.com/tempbottle/CVE-2014-0196 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05312 · Security Note
• https://ubuntu.com/security/notices/USN-1744-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05310 · Security Note
• https://ubuntu.com/security/notices/USN-1805-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0744.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1808-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05304 · Security Note
• https://bdu.fstec.ru/vul/2015-05306 · Security Note