Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1300-1

Опубликовано: 15 мая 2017
Источник: suse-cvrf

Описание

Security update for Linux Kernel Live Patch 15 for SLE 12

This update for the Linux Kernel 3.12.60-52_54 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1030575, bsc#1031660).
  • bsc#1030467: Updated Dirty COW fix. The former patch caused some apps to freeze in rare circumstances

Список пакетов

SUSE Linux Enterprise Server 12-LTSS
kgraft-patch-3_12_60-52_54-default-9-2.1
kgraft-patch-3_12_60-52_54-xen-9-2.1
SUSE Linux Enterprise Server for SAP Applications 12
kgraft-patch-3_12_60-52_54-default-9-2.1
kgraft-patch-3_12_60-52_54-xen-9-2.1

Ссылки

Описание

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.

Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_60-52_54-default-9-2.1
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_60-52_54-xen-9-2.1
SUSE Linux Enterprise Server for SAP Applications 12:kgraft-patch-3_12_60-52_54-default-9-2.1
SUSE Linux Enterprise Server for SAP Applications 12:kgraft-patch-3_12_60-52_54-xen-9-2.1
Ссылки
Уязвимость SUSE-SU-2017:1300-1