ALT-PU-2017-1755

Высокий

ALT-PU-2017-1755: package kernel-image-std-def update to version 4.9.33-alt3

Источник

errata.altlinux.org

Дата публикации

19.06.2017

Дата обновления

19.06.2017

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kernel-image-std-def to version 4.9.33-alt3.

Устраненные уязвимости2

BDU:2017-01479

Высокий 7.4

Дата публикации: 23.06.2017

Уязвимость в реализации механизма Stack Guard-Page ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Высокий 7.4

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Local
Complexity: High
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Средний 6.2

AV:L/AC:H/Au:N/C:C/I:C/A:C

Access vector: Local
Complexity: High
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Ссылки

BDU:2017-01479 https://bdu.fstec.ru/vul/2017-01479

Ссылки1

ALT-PU-2017-1755 https://errata.altlinux.org/ALT-PU-2017-1755

Связанные уязвимости

CVE-2017-1000364

CVSS3: 7.4

ubuntu

больше 9 лет назад

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).