Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:0832-1

Опубликовано: 01 апр. 2015
Источник: suse-cvrf

Описание

Security update for kgraft-patch-SLE12_Update_1, kgraft-patch-SLE12_Update_2

This update supplies kgraft patches to fix one security vulnerability.

CVE-2015-1421: A use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel allowed remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

This patch supplies kgraft patches for the first kernel update and the second kernel update published for SUSE Linux Enterprise Server 12. The third kernel update contains the patch already.

Список пакетов

SUSE Linux Enterprise Live Patching 12
kgraft-patch-3_12_32-33-default-2-3.1
kgraft-patch-3_12_32-33-xen-2-3.1
kgraft-patch-3_12_36-38-default-2-3.1
kgraft-patch-3_12_36-38-xen-2-3.1

Ссылки

Описание

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_32-33-default-2-3.1
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_32-33-xen-2-3.1
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_36-38-default-2-3.1
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_36-38-xen-2-3.1
Ссылки