All Threats

Viruses

Hackers

Spam

Whole site    Viruses
  
About Hackers
Analysis
News
Glossary
Weblog



 
Virus Encyclopedia
Virus Encyclopedia

Learn about worms, viruses, Trojans and more in our Virus Encyclopedia.

About Spam
About Spam

Read about spam and spammers in our About Spam section.

 

  Home / Hackers / About Hackers / Software Vulnerabilities / Examples and Descriptions / SA38487

SUSE update for kernel

Secunia ID

SA38487

CVE-ID

CVE-2009-3939, CVE-2009-4141, CVE-2009-4536, CVE-2009-4538, CVE-2010-0003, CVE-2010-0006, CVE-2010-0007, CVE-2010-0299

Release Date

09 Feb 2010

Criticality

Less Critical

Solution Status

Vendor Patch

Where

From local network

Impact
DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.


Manipulation of data

This includes vulnerabilities where a user or a remote attacker can manipulate local data on a system, but not necessarily be able to gain escalated privileges or system access.

The most frequent type of vulnerabilities with this impact are SQL-injection vulnerabilities, where a malicious user or person can manipulate SQL queries.


Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.


Security Bypass

This covers vulnerabilities or security issues where malicious users or people can bypass certain security mechanisms of the application.

The actual impact varies significantly depending on the design and purpose of the affected application.


Description

SUSE has issued an update for the kernel. This fixes some security issues and vulnerabilities, which can be exploited by malicious, local users to manipulate certain data, bypass certain security restrictions, and gain escalated privileges, and by malicious people to cause a DoS (Denial of Service).

For more information:
SA35265
SA37590
SA38133
SA38199

1) A vulnerability is caused due to a NULL pointer dereference when processing IPv6 "Jumbograms".

2) The devtmpfs file system sets incorrect file permissions to it's root directory, which can be exploited by malicious, local users to e.g. gain escalated privileges.

Note: This file system is not used by default.

Solution

Apply updated packages.

x86 Platform:

openSUSE 11.2:

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-debug-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-debug-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-debug-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-default-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-default-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-default-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-desktop-base-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-desktop-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-desktop-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-pae-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-pae-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-pae-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-trace-base-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-trace-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-trace-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-vanilla-base-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-vanilla-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-vanilla-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-xen-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-xen-debugsource-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-xen-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-debug-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-debug-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-debug-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-default-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-default-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-default-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-desktop-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-desktop-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-desktop-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-pae-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-pae-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-pae-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-syms-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-trace-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-trace-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-trace-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-vanilla-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-vanilla-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-vanilla-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-xen-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-xen-base-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/kernel-xen-devel-2.6.31.12-0.1.1.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/preload-kmp-default-1.1_2.6.31.12_0.1-6.9.12.i586.rpm

http://download.opensuse.org/update/11.2/rpm/i586/preload-kmp-desktop-1.1_2.6.31.12_0.1-6.9.12.i586.rpm

Platform Independent:

openSUSE 11.2:

http://download.opensuse.org/update/11.2/rpm/noarch/kernel-source-2.6.31.12-0.1.1.noarch.rpm

http://download.opensuse.org/update/11.2/rpm/noarch/kernel-source-vanilla-2.6.31.12-0.1.1.noarch.rpm

x86-64 Platform:

openSUSE 11.2:

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-debug-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-debug-debugsource-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-debug-devel-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-default-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-default-debugsource-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-default-devel-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-desktop-base-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-desktop-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-desktop-debugsource-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-trace-base-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-trace-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-trace-debugsource-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-vanilla-base-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-vanilla-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-vanilla-debugsource-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-xen-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-xen-debugsource-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-xen-devel-debuginfo-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-debug-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-debug-base-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-debug-devel-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-default-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-default-base-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-default-devel-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-desktop-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-desktop-base-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-desktop-devel-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-syms-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-trace-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-trace-base-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-trace-devel-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-vanilla-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-vanilla-base-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-vanilla-devel-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-xen-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-xen-base-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-xen-devel-2.6.31.12-0.1.1.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/preload-kmp-default-1.1_2.6.31.12_0.1-6.9.12.x86_64.rpm

http://download.opensuse.org/update/11.2/rpm/x86_64/preload-kmp-desktop-1.1_2.6.31.12_0.1-6.9.12.x86_64.rpm

Sources:

openSUSE 11.2:

http://download.opensuse.org/update/11.2/rpm/src/kernel-debug-2.6.31.12-0.1.1.nosrc.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-default-2.6.31.12-0.1.1.nosrc.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-desktop-2.6.31.12-0.1.1.nosrc.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-pae-2.6.31.12-0.1.1.nosrc.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-source-2.6.31.12-0.1.1.src.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-syms-2.6.31.12-0.1.1.src.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-trace-2.6.31.12-0.1.1.nosrc.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-vanilla-2.6.31.12-0.1.1.nosrc.rpm

http://download.opensuse.org/update/11.2/rpm/src/kernel-xen-2.6.31.12-0.1.1.nosrc.rpm

Original Advisory

SUSE-SA:2010:010:
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html




 

Copyright © 1996 - 2010
Kaspersky Lab
Industry-leading Antivirus Software
All rights reserved
 

Email: webmaster@viruslist.com