Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1938-1

Опубликовано: 24 июл. 2017
Источник: suse-cvrf

Описание

Security update for apport

This update for apport fixes the following issues:

Security issue fixed:

  • CVE-2015-1338: Insecurely created crash dumps could lead to a DoS or privilege escalation through malicious symlinks. (bsc#947731)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
apport-0.114-12.8.3.1
apport-crashdb-sle-0.114-0.8.3.1
apport-gtk-0.114-12.8.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
apport-0.114-12.8.3.1
apport-crashdb-sle-0.114-0.8.3.1
apport-gtk-0.114-12.8.3.1

Ссылки

Описание

kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:apport-0.114-12.8.3.1
SUSE Linux Enterprise Server 11 SP4:apport-crashdb-sle-0.114-0.8.3.1
SUSE Linux Enterprise Server 11 SP4:apport-gtk-0.114-12.8.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:apport-0.114-12.8.3.1
Ссылки