ALT Linux Team

Package kernel-image-std-debug update in p8 on 2019-01-14

ALT-PU-2019-1037-1

Package kernel-image-std-debug updated to version 4.9.150-alt0.M80P.1 for branch p8 in task 219310.

Closed vulnerabilities

Published: 2018-12-12

BDU:2019-01409

Уязвимость функции hso_get_config_data ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.6) Vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM (4.9) Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N
References:
Published: 2019-03-21
Modified: 2024-11-21

CVE-2018-19985

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

Severity: LOW (2.1) Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Severity: MEDIUM (4.6) Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top