Описание
Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)
This update for the Linux Kernel 4.4.178-94_91 fixes several issues.
The following security issues were fixed:
- CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. (bsc#1137586)
- CVE-2019-11478: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. (bsc#1137586)
- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bsc#1136424).
This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).
Список пакетов
SUSE Linux Enterprise Live Patching 12 SP4
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
Ссылки
- Link for SUSE-SU-2019:1948-1
- E-Mail link for SUSE-SU-2019:1948-1
- SUSE Security Ratings
- SUSE Bug 1136446
- SUSE Bug 1137597
- SUSE Bug 1140747
- SUSE CVE CVE-2019-11477 page
- SUSE CVE CVE-2019-11478 page
- SUSE CVE CVE-2019-3846 page
Описание
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
Затронутые продукты
Ссылки
- CVE-2019-11477
- SUSE Bug 1132686
- SUSE Bug 1137586
- SUSE Bug 1142129
- SUSE Bug 1153242
Описание
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
Затронутые продукты
Ссылки
- CVE-2019-11478
- SUSE Bug 1132686
- SUSE Bug 1137586
- SUSE Bug 1142129
- SUSE Bug 1143542
Описание
A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
Затронутые продукты
Ссылки
- CVE-2019-3846
- SUSE Bug 1136424
- SUSE Bug 1136446
- SUSE Bug 1156330