Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:1445-1

Опубликовано: 31 июл. 2015
Источник: suse-cvrf

Описание

Security update for busybox

-The following issues are fixed by this update: CVE-2014-9645: do not allow / in module names to avoid loading bad modules (bnc#914660)

Список пакетов

SUSE Linux Enterprise Desktop 12
busybox-1.21.1-3.3
SUSE Linux Enterprise Server 12
busybox-1.21.1-3.3
SUSE Linux Enterprise Server for SAP Applications 12
busybox-1.21.1-3.3

Ссылки

Описание

The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.

Затронутые продукты
SUSE Linux Enterprise Desktop 12:busybox-1.21.1-3.3
SUSE Linux Enterprise Server 12:busybox-1.21.1-3.3
SUSE Linux Enterprise Server for SAP Applications 12:busybox-1.21.1-3.3
Ссылки