Описание
Security update for Linux Kernel Live Patch 20 for SLE 12 SP1
This update for the Linux Kernel 3.12.74-60_64_57 fixes one issue.
The following security bugs were fixed:
- CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call (bsc#1045327).
- CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bsc#1057950).
Список пакетов
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP1
Ссылки
- Link for SUSE-SU-2017:2796-1
- E-Mail link for SUSE-SU-2017:2796-1
- SUSE Security Ratings
- SUSE Bug 1045327
- SUSE Bug 1057950
- SUSE CVE CVE-2017-1000251 page
- SUSE CVE CVE-2017-15274 page
Описание
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
Затронутые продукты
Ссылки
- CVE-2017-1000251
- SUSE Bug 1057389
- SUSE Bug 1057950
- SUSE Bug 1070535
- SUSE Bug 1072117
- SUSE Bug 1072162
- SUSE Bug 1120758
Описание
security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.
Затронутые продукты
Ссылки
- CVE-2017-15274
- SUSE Bug 1045327
- SUSE Bug 1062471