The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.
CVSS Details
- CVSS 3.1 Base Score: 6.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xenUpgrade kernel-vmipaeUpgrade kernel-sourceUpgrade kernel-kdumppaeUpgrade kernel-vmiUpgrade kernel-symsUpgrade kernel-smpUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade kernel-xenpae | Jun 4, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-29-virtual | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub