The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-kdumpUpgrade kernel-ps3Upgrade kernel-paeUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-rtUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-docsUpgrade kernel-xenUpgrade kernel-source | Feb 17, 2015 | Sep 4, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub