SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7304)

NASLDB: SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7304)

General

ID: 59154
Name: SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7304)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: –

Port: 0
Family: SuSE Local Security Checks
Type: Local

Description

This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes
several security issues and bugs.

The following security issues were fixed :

– A local attacker could use a Oops (kernel crash) caused
by other flaws to write a 0 byte to a attacker
controlled address in the kernel. This could lead to
privilege escalation together with other issues.
(CVE-2010-4258)

– The backend driver in Xen 3.x allows guest OS users to
cause a denial of service via a kernel thread leak,
which prevents the device and guest OS from being shut
down or create a zombie domain, causes a hang in
zenwatch, or prevents unspecified xm commands from
working properly, related to (1) netback, (2) blkback,
or (3) blktap. (CVE-2010-3699)

– The econet_sendmsg function in net/econet/af_econet.c in
the Linux kernel, when an econet address is configured,
allowed local users to cause a denial of service (NULL
pointer dereference and OOPS) via a sendmsg call that
specifies a NULL value for the remote address field.
(CVE-2010-3849)

– Stack-based buffer overflow in the econet_sendmsg
function in net/econet/af_econet.c in the Linux kernel
when an econet address is configured, allowed local
users to gain privileges by providing a large number of
iovec structures. (CVE-2010-3848)

– The ec_dev_ioctl function in net/econet/af_econet.c in
the Linux kernel did not require the CAP_NET_ADMIN
capability, which allowed local users to bypass intended
access restrictions and configure econet addresses via
an SIOCSIFADDR ioctl call. (CVE-2010-3850)

– A overflow in sendto() and recvfrom() routines was fixed
that could be used by local attackers to potentially
crash the kernel using some socket families like L2TP.
(CVE-2010-4160)

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2010-3699
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2011/01/12
Plugin Release: 2012/05/17

Plugin

Version: 1.3
Filename: suse_kernel-7304.nasl
Filesize: 6390 bytes
MD5 Hash: ddf5a776b41ab895c0440e5d7e434b6b

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG