Upstream information
Description
Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Note from the SUSE Security Team
The ECONET module is not enabled in SUSE Linux Enterprise 11 SP1, openSUSE 11.2 and 11.3. Older products have not configured CONFIG_ECONET_AUNUDP nor CONFIG_ECONET_NATIVE which is a precondition for this problem, so no SUSE product is affected by this issue. Novell Bugzilla entry: 647632 SUSE Security Advisories:- SUSE-SA:2011:005, published Tue, 25 Jan 2011 11:00:00 +0000
- SUSE-SA:2011:007, published Mon, 07 Feb 2011 09:00:00 +0000
- SUSE-SA:2011:008, published Fri, 11 Feb 2011 12:00:00 +0000
- SUSE-SA:2011:017, published Mon, 18 Apr 2011 11:00:00 +0000
- SUSE-SA:2011:020, published Thu, 28 Apr 2011 11:00:00 +0000
- openSUSE-SU-2011:0346-1, published Fri, 15 Apr 2011 22:02:25 +0200 (CEST)
- openSUSE-SU-2011:0399-1, published Thu, 28 Apr 2011 04:08:10 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit |
| sles10-sp2-ltss.s390x ZYPP Patch Nr: 7538 |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| Open Enterprise Server |
| sles9-oes.x86 YOU Patch Nr: 12678 |
| SUSE Linux Enterprise Server 10 SP2 for x86 |
| sles10-sp2-ltss.x86 ZYPP Patch Nr: 7537 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303 |
| SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T |
| sles10-sp2-ltss.x86-64 ZYPP Patch Nr: 7539 |
| SUSE Linux Enterprise Real Time 11 SP1 |
| x86-64 SAT Patch Nr: 3859 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7310 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7310 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7310 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7306 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7306 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12814 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.ia64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7305 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.ia64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7305 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.ia64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7305 |
| SUSE Linux Enterprise Server RT Solution 10 for x86 |
| slert10-sp3.x86-64 slert10-sp3.x86 ZYPP Patch Nr: 7444 |
| SUSE Linux Enterprise Server RT Solution 10 for AMD64 and Intel EM64T |
| slert10-sp3.x86-64 slert10-sp3.x86 ZYPP Patch Nr: 7444 |
| openSUSE 11.3 |
| |
| openSUSE 11.3 |
| |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304 |
