Branch p7 update bulletin.

Package kernel-image-un-def updated to version 3.19.1-alt1 for branch p7 in task 141625.

Published: 2015-03-26

BDU:2015-09825

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному нарушителю нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09826

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09827

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09828

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09829

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09830

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09831

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09832

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09833

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09834

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09835

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09836

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09837

Severity: CRITICAL (10.0)

References:

Published: 2015-03-26

BDU:2015-09838

Severity: CRITICAL (10.0)

References:

Published: 2015-03-24

BDU:2015-09846

Уязвимости операционной системы Ubuntu, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 2015-03-24

BDU:2015-09847

Severity: CRITICAL (10.0)

References:

Published: 2017-05-03

BDU:2017-01159

Уязвимость компонента kernel/events/core.c ядра операционной системы Android, позволяющая нарушителю повысить свои привилегии

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2017-05-03

BDU:2017-01160

Уязвимость компонента drivers/regulator/core.c ядра операционной системы Android, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

Severity: HIGH (7.6)

References:

Published: 2015-05-27
Modified: 2024-11-21

CVE-2014-9710

The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, which allows local users to bypass intended ACL settings and gain privileges via standard filesystem operations (1) during an xattr-replacement time window, related to a race condition, or (2) after an xattr-replacement attempt that fails because the data does not fit.

References:

Published: 2017-05-03
Modified: 2024-11-21

CVE-2014-9940

The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

Severity: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2016-05-09
Modified: 2024-11-21

CVE-2015-0571

The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2016-11-28
Modified: 2024-11-21

CVE-2015-1328

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.

Severity: HIGH (7.8) Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2015-03-16
Modified: 2024-11-21

CVE-2015-1420

Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.

Severity: LOW (1.9)

References:

Published: 2015-03-16
Modified: 2024-11-21

CVE-2015-1421

Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

Severity: CRITICAL (10.0)

References:

Published: 2015-04-06
Modified: 2024-11-21

CVE-2015-1465

The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.

Severity: HIGH (7.8)

References:

Published: 2015-03-16
Modified: 2024-11-21

CVE-2015-1593

The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.

Severity: MEDIUM (5.0)

References:

Published: 2015-04-21
Modified: 2024-11-21

CVE-2015-2041

net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.

Severity: MEDIUM (4.6)

References:

Published: 2015-04-21
Modified: 2024-11-21

CVE-2015-2042

net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry.

Severity: MEDIUM (4.6)

References:

Published: 2016-10-17
Modified: 2024-11-21

CVE-2015-3288

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2015-08-05
Modified: 2024-11-21

CVE-2015-4167

The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.

Severity: MEDIUM (4.7)

References:

Published: 2015-11-17
Modified: 2024-11-21

CVE-2015-8215

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product.

Severity: MEDIUM (5.0)

References:

Published: 2017-05-03
Modified: 2024-11-21

CVE-2015-9004

kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perf_pmu_register and perf_event_open functions.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2017-12-06
Modified: 2024-11-21

CVE-2017-15868

The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2019-09-30
Modified: 2024-11-21

CVE-2019-16995

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Package kernel-modules-virtualbox-addition-un-def updated to version 4.3.22-alt1.201473.1 for branch p7 in task 141625.