Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 21, 2012 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-desktop-develUpgrade kernel-vmi-baseUpgrade kernel-kdumpUpgrade kernel-ec2-baseUpgrade kernel-vmipaeUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-smpUpgrade kernel-desktop-baseUpgrade kernel-xenpaeUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-debug-baseUpgrade kernel-kdumppaeUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-vmi-develUpgrade kernel-pae-develUpgrade kernel-vanilla-baseUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-ec2Upgrade kernel-desktopUpgrade preload-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-bigsmpUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-source-vanillaUpgrade kernel-trace-baseUpgrade kernel-debug-develUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-vanilla-develUpgrade preload-kmp-desktop | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-server | Nov 8, 2024 | Jun 21, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub