|
|
>> SuSE Security Update Fixes Multiple Linux Kernel Vulnerabilities
|
SuSE has released updated packages to address multiple security vulnerabilities identified in Kernel. These flaws cuold be exploited by attackers to cause a denial of service.
A check in "ptrace" handling that finds out if a process is attaching to itself was incorrect and could be used by a local attacker to crash the machine.
A check in reaping of terminating child processes did not consider "ptrace" attached processes and would leave a ptrace reference dangling, which could lead to a local user being able to crash the machine.
A task leak problem when releasing POSIX timers could lead to local users causing a denial of service by exhausting system memory.
A locking problem in POSIX timer handling could be used by a local attacker on a SMP system to deadlock the machine.
A problem in the Linux auditing code could lead to a memory leak which finally could exhaust system memory of a machine.
An infinite loop in the IPv6 UDP loopback handling can be easily triggered by a local user and lead to a denial of service.
A bug in IPv6 flow label handling code could be used by a local attacker to free non-allocated memory and in turn corrupt kernel memory and likely crash the machine.
A memory kernel leak in VFS lease handling can exhaust the machine memory and so cause a local denial of service.
Unplugging an user space controlled USB device with an URB pending in user space could crash the kernel, which can be triggered by local attacker.
An incorrect padding in Orinoco wireless driver could expose kernel data to the air.
Missing "sockfd_put()" calls in "routing_ioctl()" can leak file handles which in turn could exhaust system memory.
A race condition in "do_coredump" [signal.c] could allow local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP.
Affected Products
SuSE Linux 10.0
Solution
Upgrade the affected packages :
ftp://ftp.suse.com/pub/
References
http://www.vupen.com/english/advisories/2005/2774
http://www.frsirt.com/english/reference/1983
ChangeLog
2005-12-06 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
