Описание
Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_135 fixes several issues.
The following security issues were fixed:
- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177513).
- CVE-2020-0429: Fixed a memory corruption due to a use after free which could have led to to local privilege escalation (bsc#1176931).
- CVE-2020-11668: Fixed an issue where the Xirlink camera USB driver mishandled invalid descriptors (bsc#1173942).
- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165631).
Список пакетов
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP3
Ссылки
- Link for SUSE-SU-2020:3656-1
- E-Mail link for SUSE-SU-2020:3656-1
- SUSE Security Ratings
- SUSE Bug 1165631
- SUSE Bug 1173942
- SUSE Bug 1176931
- SUSE Bug 1177513
- SUSE CVE CVE-2020-0429 page
- SUSE CVE CVE-2020-11668 page
- SUSE CVE CVE-2020-1749 page
- SUSE CVE CVE-2020-25645 page
Описание
In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806
Затронутые продукты
Ссылки
- CVE-2020-0429
- SUSE Bug 1176724
- SUSE Bug 1176931
- SUSE Bug 1188026
Описание
In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
Затронутые продукты
Ссылки
- CVE-2020-11668
- SUSE Bug 1168952
- SUSE Bug 1173942
Описание
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Затронутые продукты
Ссылки
- CVE-2020-1749
- SUSE Bug 1165629
- SUSE Bug 1165631
- SUSE Bug 1177511
- SUSE Bug 1177513
- SUSE Bug 1189302
Описание
A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Затронутые продукты
Ссылки
- CVE-2020-25645
- SUSE Bug 1177511
- SUSE Bug 1177513