Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-8569

Высокий

ALT-PU-2023-8569: package kernel-image-un-def update to version 6.1.49-alt1

Источник
errata.altlinux.org
Дата публикации
31.08.2023
Дата обновления
10.10.2026
Устраненные уязвимости
131

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kernel-image-un-def to version 6.1.49-alt1.

Устраненные уязвимости131

Связанные уязвимости

CVSS3: 8.8
altlinux
около 3 лет назад

ALT-PU-2023-8725: package `kernel-image-rt` update to version 6.1.46-alt1.rt13

CVSS3: 7.8
ubuntu
около 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVSS3: 5.5
redhat
больше 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVSS3: 7.8
nvd
около 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVSS3: 7.8
debian
около 3 лет назад

The fix for XSA-423 added logic to Linux'es netback driver to deal wit ...