RETIRED: Linux Kernel 'irda-usb.c' Remote Buffer Overflow Vulnerability
BID:33449
Info
RETIRED: Linux Kernel 'irda-usb.c' Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 33449 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2009 12:00AM |
| Updated: | Jan 27 2009 06:29PM |
| Credit: | Jos-Vicente Gilabert |
| Vulnerable: |
Linux kernel 2.6.28 .1 Linux kernel 2.6.28 -rc7 Linux kernel 2.6.28 -rc5 Linux kernel 2.6.28 -rc1 Linux kernel 2.6.28 -git7 Linux kernel 2.6.28 Linux kernel 2.6.27 6 Linux kernel 2.6.27 3 Linux kernel 2.6.27 12 Linux kernel 2.6.27 .8 Linux kernel 2.6.27 .5 Linux kernel 2.6.27 .5 Linux kernel 2.6.27 .13 Linux kernel 2.6.27 .12 Linux kernel 2.6.27 -rc8-git5 Linux kernel 2.6.27 -rc8 Linux kernel 2.6.27 -rc6-git6 Linux kernel 2.6.27 -rc6 Linux kernel 2.6.27 -rc5 Linux kernel 2.6.27 -rc2 Linux kernel 2.6.27 -rc1 Linux kernel 2.6.27 Linux kernel 2.6.26 7 Linux kernel 2.6.26 .6 Linux kernel 2.6.26 .4 Linux kernel 2.6.26 .3 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.26 Linux kernel 2.6.25 19 Linux kernel 2.6.25 .9 Linux kernel 2.6.25 .8 Linux kernel 2.6.25 .7 Linux kernel 2.6.25 .6 Linux kernel 2.6.25 .5 Linux kernel 2.6.25 .15 Linux kernel 2.6.25 .13 Linux kernel 2.6.25 .12 Linux kernel 2.6.25 .11 Linux kernel 2.6.25 .10 Linux kernel 2.6.25 Linux kernel 2.6.25 Linux kernel 2.6.24 .2 Linux kernel 2.6.24 .1 Linux kernel 2.6.24 -rc5 Linux kernel 2.6.24 -rc4 Linux kernel 2.6.24 -rc3 Linux kernel 2.6.24 -git13 Linux kernel 2.6.24 Linux kernel 2.6.23 .7 Linux kernel 2.6.23 .6 Linux kernel 2.6.23 .5 Linux kernel 2.6.23 .4 Linux kernel 2.6.23 .3 Linux kernel 2.6.23 .2 Linux kernel 2.6.23 -rc2 Linux kernel 2.6.23 -rc1 Linux kernel 2.6.23 Linux kernel 2.6.22 .8 Linux kernel 2.6.22 .7 Linux kernel 2.6.22 .6 Linux kernel 2.6.22 .5 Linux kernel 2.6.22 .4 Linux kernel 2.6.22 .3 Linux kernel 2.6.22 .2 Linux kernel 2.6.22 .17 Linux kernel 2.6.22 .16 Linux kernel 2.6.22 .15 Linux kernel 2.6.22 .14 Linux kernel 2.6.22 .13 Linux kernel 2.6.22 .12 Linux kernel 2.6.22 .11 Linux kernel 2.6.22 .1 Linux kernel 2.6.22 Linux kernel 2.6.21 4 Linux kernel 2.6.21 .7 Linux kernel 2.6.21 .6 Linux kernel 2.6.21 .3 Linux kernel 2.6.21 .2 Linux kernel 2.6.21 .1 Linux kernel 2.6.21 -git8 Linux kernel 2.6.21 Linux kernel 2.6.20 .9 Linux kernel 2.6.20 .8 Linux kernel 2.6.20 .5 Linux kernel 2.6.20 .4 Linux kernel 2.6.20 .15 Linux kernel 2.6.20 .1 Linux kernel 2.6.20 -git5 Linux kernel 2.6.20 Linux kernel 2.6.20 Linux kernel 2.6.19 .2 Linux kernel 2.6.19 .1 Linux kernel 2.6.19 .1 Linux kernel 2.6.19 -rc4 Linux kernel 2.6.19 -rc3 Linux kernel 2.6.19 -rc2 Linux kernel 2.6.19 -rc1 Linux kernel 2.6.19 Linux kernel 2.6.18 .4 Linux kernel 2.6.18 .3 Linux kernel 2.6.18 .1 Linux kernel 2.6.18 Linux kernel 2.6.26.1 Linux kernel 2.6.26-rc5-git1 Linux kernel 2.6.25.4 Linux kernel 2.6.25.3 Linux kernel 2.6.25.2 Linux kernel 2.6.25.1 Linux kernel 2.6.24.6 Linux kernel 2.6.24-rc2 Linux kernel 2.6.24-rc1 Linux kernel 2.6.23.14 Linux kernel 2.6.23.10 Linux kernel 2.6.23.1 Linux kernel 2.6.23.09 Linux kernel 2.6.22-rc7 Linux kernel 2.6.22-rc1 Linux kernel 2.6.21-RC6 Linux kernel 2.6.21-RC5 Linux kernel 2.6.21-RC4 Linux kernel 2.6.21-RC3 Linux kernel 2.6.21-RC3 Linux kernel 2.6.20.3 Linux kernel 2.6.20.2 Linux kernel 2.6.20.13 Linux kernel 2.6.20.11 Linux kernel 2.6.20-rc2 Linux kernel 2.6.20-2 Linux kernel 2.6.18-8.1.8.el5 Linux kernel 2.6.18-53 Linux kernel 2.6.18 |
| Not Vulnerable: |
Linux kernel 2.6.28 .2 |
Discussion
RETIRED: Linux Kernel 'irda-usb.c' Remote Buffer Overflow Vulnerability
The Linux Kernel is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to prevent firmware uploading. This may result in a denial-of-service condition. Given the nature of this issue, the attacker may be able to execute arbitrary code with kernel-level privileges, but this has not been confirmed.
Linux Kernel 2.6.18 up to 2.6.28.2 are vulnerable.
UPDATE (January 27, 2009): This BID is being retired because there is no discernable security implication.
The Linux Kernel is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to prevent firmware uploading. This may result in a denial-of-service condition. Given the nature of this issue, the attacker may be able to execute arbitrary code with kernel-level privileges, but this has not been confirmed.
Linux Kernel 2.6.18 up to 2.6.28.2 are vulnerable.
UPDATE (January 27, 2009): This BID is being retired because there is no discernable security implication.
Exploit / POC
RETIRED: Linux Kernel 'irda-usb.c' Remote Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Linux Kernel 'irda-usb.c' Remote Buffer Overflow Vulnerability
Solution:
Fixes are available. Please see the references for more information.
Linux kernel 2.6.28 -git7
Linux kernel 2.6.28 .1
Linux kernel 2.6.28 -rc5
Linux kernel 2.6.28
Solution:
Fixes are available. Please see the references for more information.
Linux kernel 2.6.28 -git7
-
Linux patch-2.6.28.2.bz2
http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.28.2.bz2
Linux kernel 2.6.28 .1
-
Linux patch-2.6.28.2.bz2
http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.28.2.bz2
Linux kernel 2.6.28 -rc5
-
Linux patch-2.6.28.2.bz2
http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.28.2.bz2
Linux kernel 2.6.28
-
Linux patch-2.6.28.2.bz2
http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.28.2.bz2
References
RETIRED: Linux Kernel 'irda-usb.c' Remote Buffer Overflow Vulnerability
References:
References:
- Bug 12397 function stir421x_patch_device can't upload firmware (Jose-Vicente Gilabert )
- drivers/net/irda/irda-usb.c: fix buffer overflow (Jos-Vicente Gilabert)
- Linux 2.6.28.2 (kernel.org)
- Linux kernel Homepage (kernel.org)
- Re: CVE request -- Linux kernel irda driver buffer overflow (Mark J Cox)