|Category:||SuSE Local Security Checks|
|Title:||SUSE: Security Advisory (SUSE-SU-2018:3961-1)|
|Summary:||The remote host is missing an update for the 'Linux Kernel' package(s) announced via the SUSE-SU-2018:3961-1 advisory.|
The remote host is missing an update for the 'Linux Kernel' package(s) announced via the SUSE-SU-2018:3961-1 advisory.
The SUSE Linux Enterprise 15 azure kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2018-9363: Fixed an integer overflow that could have been used for
an out of bounds write with no additional execution privileges needed.
User interaction is not needed for exploitation (bsc#1105292).
CVE-2018-6555: The irda_setsockopt function in net/irda/af_irda.c was
fixed in drivers/staging/irda/net/af_irda.c that allowed local users to
cause a denial of service (ias_object use-after-free and system crash)
or possibly have unspecified other impact via an AF_IRDA socket
CVE-2018-6554: Fixed memory leak in the irda_bind function in
net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c that
allowed local users to cause a denial of service (memory consumption) by
repeatedly binding an AF_IRDA socket (bsc#1106509).
CVE-2018-18710: An information leak was fixed in cdrom_ioctl_select_disc
in drivers/cdrom/cdrom.c that could have been used by local attackers to
read kernel memory because a cast from unsigned long to int interferes
with bounds checking. This is similar to CVE-2018-10940 and
CVE-2018-18445: Fixed faulty computation of numeric bounds in the BPF
verifier that now permits out-of-bounds memory accesses because
adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandled 32-bit
right shifts (bsc#1112372).
CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c was
fixed that was vulnerable to sequence number overflows. An attacker can
trigger a use-after-free (and possibly gain privileges) via certain
thread creation, map, unmap, invalidation, and dereference operations.
CVE-2018-16658: An information leak in cdrom_ioctl_drive_status in
drivers/cdrom/cdrom.c was fixed that could have leed to be used by local
attackers to read kernel memory because a cast from unsigned long to int
interferes with bounds checking. This is similar to CVE-2018-10940
CVE-2018-15572: The spectre_v2_select_mitigation function in
arch/x86/kernel/cpu/bugs.c was not always fill RSB upon a context
switch, which makes it easier for attackers to conduct
userspace-userspace spectreRSB attacks. (bsc#1102517)
CVE-2018-14633: A security flaw was fixed in the
chap_server_compute_md5() function in the ISCSI target code in a way an
authentication request from an ISCSI initiator is processed. An
unauthenticated remote attacker can cause a stack buffer overflow and
smash up to 17 bytes of the stack. The attack requires the iSCSI target
to be enabled on the victim host. Depending on how the target's code was
built (i.e. depending on a compiler, compile flags and hardware
architecture) an attack may lead to a system crash and thus to a
denial-of-service or possibly to a non-authorized access to data
exported by an iSCSI target. ... [Please see the references for more information on the vulnerabilities]
'Linux Kernel' package(s) on SUSE Linux Enterprise Module for Public Cloud 15
Please install the updated package(s).
Common Vulnerability Exposure (CVE) ID: CVE-2018-1128|
Debian Security Information: DSA-4339 (Google Search)
RedHat Security Advisories: RHSA-2018:2177
RedHat Security Advisories: RHSA-2018:2179
RedHat Security Advisories: RHSA-2018:2261
RedHat Security Advisories: RHSA-2018:2274
SuSE Security Announcement: openSUSE-SU-2019:1284 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2018-1129
Common Vulnerability Exposure (CVE) ID: CVE-2018-6554
BugTraq ID: 105302
Debian Security Information: DSA-4308 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2018-6555
BugTraq ID: 105304
Common Vulnerability Exposure (CVE) ID: CVE-2018-9363
RedHat Security Advisories: RHSA-2018:2948
RedHat Security Advisories: RHSA-2019:2029
RedHat Security Advisories: RHSA-2019:2043
|Copyright||Copyright (C) 2021 Greenbone Networks GmbH|
|This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.