The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-docsUpgrade kernel-ppc64-develUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-traceUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-trace-develUpgrade kernel-pae-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-server | Nov 8, 2024 | Jun 10, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub