Branch t7 update bulletin.

Package apt-repo updated to version 1.3.5-alt1 for branch t7 in task 164515.

1.2.0-alt1 добавляет несуществующий репозитарий "x86_64-i586 task"

Package kernel-image-std-def updated to version 3.14.68-alt0.M70P.1 for branch t7 in task 164515.

Published: 2016-03-31

BDU:2016-02082

Уязвимость функции usbip_recv_xbuff (drivers/usb/usbip/usbip_common.c) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2016-3955

Published: 2016-07-04
Modified: 2024-11-21

CVE-2016-3955

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Branch t7 update on 2016-05-13

ALT-BU-2016-2766-1

ALT-PU-2016-1476-1

Closed bugs

Bug #31577

ALT-PU-2016-1477-1

Closed vulnerabilities

BDU:2016-02082

CVE-2016-3955