Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0276-1

Опубликовано: 29 янв. 2018
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP1)

This update for the Linux Kernel 3.12.69-60_64_32 fixes several issues.

The following security issues were fixed:

  • CVE-2017-15868: The bnep_add_connection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted application (bsc#1071471).

Список пакетов

SUSE Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-3_12_69-60_64_32-default-10-2.1
kgraft-patch-3_12_69-60_64_32-xen-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
kgraft-patch-3_12_69-60_64_32-default-10-2.1
kgraft-patch-3_12_69-60_64_32-xen-10-2.1

Ссылки

Описание

The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_69-60_64_32-default-10-2.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_69-60_64_32-xen-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_69-60_64_32-default-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_69-60_64_32-xen-10-2.1
Ссылки

Описание

The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_69-60_64_32-default-10-2.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_69-60_64_32-xen-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_69-60_64_32-default-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_69-60_64_32-xen-10-2.1
Ссылки