SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6437)

NASLDB: SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6437)

General

ID: 59138
Name: SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6437)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Temporal Vector: –

Port: 0
Family: SuSE Local Security Checks
Type: Local

Description

This patch updates the SUSE Linux Enterprise 10 SP2 kernel to fix
various bugs and some security issues.

The following security issues were fixed: CVE-2009-2692: A missing
NULL pointer check in the socket sendpage function can be used by
local attackers to gain root privileges.

(No cve yet) A information leak from using sigaltstack was fixed.

Enabled -fno-delete-null-pointer-checks to avoid optimizing away NULL
pointer checks and fixed Makefiles to make sure

-fwrapv is used everywhere. CVE-2009-1758: The hypervisor_callback
function in Xen allows guest user applications to cause a denial of
service (kernel oops) of the guest OS by triggering a segmentation
fault in ‘certain address ranges.’

– A crash on r8169 network cards when receiving large
packets was fixed. (CVE-2009-1389)

– The nfs_permission function in fs/nfs/dir.c in the NFS
client implementation in the Linux kernel, when
atomic_open is available, does not check execute (aka
EXEC or MAY_EXEC) permission bits, which allows local
users to bypass permissions and execute files, as
demonstrated by files on an NFSv4 fileserver.
(CVE-2009-1630)

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2009-1389
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2009/08/15
Plugin Release: 2012/05/17

Plugin

Version: 1.2
Filename: suse_kernel-6437.nasl
Filesize: 5631 bytes
MD5 Hash: 0529216f7c4ef54c66a668cfb5acbd77

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list
Dependencies: "ssh_get_info.nasl"

Latest Plugins

Latest Plugins

scip AG