The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-bigsmpUpgrade kernel-debugUpgrade kernel-kdumppaeUpgrade kernel-symsUpgrade kernel-vmipaeUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-vmi | Jun 4, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-sparc64 | Nov 8, 2024 | Jun 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub