The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-smpUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-xenpaeUpgrade kernel-vmipaeUpgrade kernel-kdumppaeUpgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-syms | Jun 4, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub