Linux Kernel 'proc_do_xprt()' Local Buffer Overflow Vulnerability
BID:31937
Info
Linux Kernel 'proc_do_xprt()' Local Buffer Overflow Vulnerability
| Bugtraq ID: | 31937 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-3911 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 27 2008 12:00AM |
| Updated: | Oct 28 2008 04:16PM |
| Credit: | Vegard Nossum |
| Vulnerable: |
S.u.S.E. openSUSE 11.0 Linux kernel 2.6.26 .3 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .9 Linux kernel 2.6.25 .8 Linux kernel 2.6.25 .7 Linux kernel 2.6.25 .6 Linux kernel 2.6.25 .5 Linux kernel 2.6.25 .15 Linux kernel 2.6.25 .13 Linux kernel 2.6.25 .12 Linux kernel 2.6.25 .11 Linux kernel 2.6.25 .10 Linux kernel 2.6.25 Linux kernel 2.6.25 Linux kernel 2.6.24 .2 Linux kernel 2.6.24 .1 Linux kernel 2.6.24 -rc5 Linux kernel 2.6.24 -rc4 Linux kernel 2.6.24 -rc3 Linux kernel 2.6.24 -git13 Linux kernel 2.6.26.1 Linux kernel 2.6.26-rc5-git1 Linux kernel 2.6.25.4 Linux kernel 2.6.25.3 Linux kernel 2.6.25.2 Linux kernel 2.6.25.1 Linux kernel 2.6.24.6 Linux kernel 2.6.24-rc2 Linux kernel 2.6.24-rc1 |
| Not Vulnerable: |
Linux kernel 2.6.26 .4 |
Discussion
Linux Kernel 'proc_do_xprt()' Local Buffer Overflow Vulnerability
The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Local attackers can exploit this issue to crash the affected kernel, denying service to legitimate users.
Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.
This issue affects Linux kernel 2.6.24-git13 through 2.6.26.4.
The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Local attackers can exploit this issue to crash the affected kernel, denying service to legitimate users.
Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.
This issue affects Linux kernel 2.6.24-git13 through 2.6.26.4.
Exploit / POC
Linux Kernel 'proc_do_xprt()' Local Buffer Overflow Vulnerability
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel 'proc_do_xprt()' Local Buffer Overflow Vulnerability
Solution:
Updates are available to address this issue. Please see the references for more information.
Linux kernel 2.6.25.2
Linux kernel 2.6.26.1
Linux kernel 2.6.25.3
Linux kernel 2.6.25.4
Linux kernel 2.6.24-rc1
S.u.S.E. openSUSE 11.0
Linux kernel 2.6.24.6
Linux kernel 2.6.26-rc5-git1
Linux kernel 2.6.24-rc2
Linux kernel 2.6.25.1
Linux kernel 2.6.24 .2
Linux kernel 2.6.24 -git13
Linux kernel 2.6.24 -rc4
Linux kernel 2.6.24 .1
Linux kernel 2.6.24 -rc3
Linux kernel 2.6.24 -rc5
Linux kernel 2.6.25
Linux kernel 2.6.25 .15
Linux kernel 2.6.25 .9
Linux kernel 2.6.25 .10
Linux kernel 2.6.25 .11
Linux kernel 2.6.25 .7
Linux kernel 2.6.25 .5
Linux kernel 2.6.25 .8
Linux kernel 2.6.25
Linux kernel 2.6.25 .6
Linux kernel 2.6.25 .13
Linux kernel 2.6.25 .12
Linux kernel 2.6.26 .3
Linux kernel 2.6.26 -rc6
Solution:
Updates are available to address this issue. Please see the references for more information.
Linux kernel 2.6.25.2
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.26.1
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25.3
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25.4
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24-rc1
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
S.u.S.E. openSUSE 11.0
-
S.u.S.E. kernel-debug-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- debug-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-debug-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-debug-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-default-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- default-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-default-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-d efault-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-default-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-default-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-docs-2.6.25.18-0.2.noarch.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/noarch/kerne l-docs-2.6.25.18-0.2.noarch.rpm -
S.u.S.E. kernel-kdump-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-k dump-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-pae-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- pae-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-ppc64-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-p pc64-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-ps3-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-p s3-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-rt-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- rt-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-rt-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-rt-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-rt_debug-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- rt_debug-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-rt_debug-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-rt_debug-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-source-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- source-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-source-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-s ource-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-source-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-source-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-syms-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- syms-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-syms-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-s yms-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-syms-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-syms-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-vanilla-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- vanilla-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-vanilla-2.6.25.18-0.2.ppc.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/kernel-v anilla-2.6.25.18-0.2.ppc.rpm -
S.u.S.E. kernel-vanilla-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-vanilla-2.6.25.18-0.2.x86_64.rpm -
S.u.S.E. kernel-xen-2.6.25.18-0.2.i586.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/kernel- xen-2.6.25.18-0.2.i586.rpm -
S.u.S.E. kernel-xen-2.6.25.18-0.2.x86_64.rpm
http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/kerne l-xen-2.6.25.18-0.2.x86_64.rpm
Linux kernel 2.6.24.6
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.26-rc5-git1
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24-rc2
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25.1
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24 .2
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24 -git13
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24 -rc4
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24 .1
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24 -rc3
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.24 -rc5
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .15
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .9
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .10
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .11
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .7
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .5
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .8
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .6
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .13
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.25 .12
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.26 .3
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
Linux kernel 2.6.26 -rc6
-
Linux linux-2.6.26.4.tar.bz2
http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.26.4.tar.bz2
References
Linux Kernel 'proc_do_xprt()' Local Buffer Overflow Vulnerability
References:
References:
- buffer overflow in /proc/sys/sunrpc/transports (Vegard Nossum)
- Linux kernel Homepage (kernel.org)