Upstream information
Description
Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C, or (4) X25_FAC_CLASS_D facility data, a different vulnerability than CVE-2010-3873.NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Novell/SUSE information
Note from the SUSE Security Team
This issue affects all SUSE products. It requires a working X.25 setup to be exploitable. Novell Bugzilla entry: 653260 SUSE Security Advisories:- SUSE-SA:2010:060, published Tue, 14 Dec 2010 12:00:00 +0000
- SUSE-SA:2011:001, published Mon, 03 Jan 2011 15:00:00 +0000
- SUSE-SA:2011:002, published Mon, 03 Jan 2011 15:00:00 +0000
- SUSE-SA:2011:004, published Fri, 14 Jan 2011 13:00:00 +0000
- SUSE-SA:2011:007, published Mon, 07 Feb 2011 09:00:00 +0000
- SUSE-SA:2011:008, published Fri, 11 Feb 2011 12:00:00 +0000
- SUSE-SU-2012:0153-1, published Mon, 6 Feb 2012 15:08:23 +0100 (CET)
- SUSE-SU-2012:0153-2, published Mon, 6 Feb 2012 23:08:27 +0100 (CET)
- openSUSE-SU-2011:0048-1, published Wed, 19 Jan 2011 01:08:48 +0100 (CET)
- openSUSE-SU-2012:0799-1, published Thu, 28 Jun 2012 10:08:31 +0200 (CEST)
- openSUSE-SU-2012:1439-1, published Mon, 5 Nov 2012 10:09:03 +0100 (CET)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Desktop 10 SP4 for x86 |
| sle10-sp4-sdk.x86 sles10-sp4.x86 sled10-sp4.x86 sles10-sp4-debuginfo.x86 ZYPP Patch Nr: 7918 |
| SUSE Linux Enterprise 10 SP4 DEBUGINFO for x86 |
| sle10-sp4-sdk.x86 sles10-sp4.x86 sled10-sp4.x86 sles10-sp4-debuginfo.x86 ZYPP Patch Nr: 7918 |
| SLE SDK 10 SP4 for x86 |
| sle10-sp4-sdk.x86 sles10-sp4.x86 sled10-sp4.x86 sles10-sp4-debuginfo.x86 ZYPP Patch Nr: 7918 |
| SUSE Linux Enterprise Server 10 SP4 for x86 |
| sle10-sp4-sdk.x86 sles10-sp4.x86 sled10-sp4.x86 sles10-sp4-debuginfo.x86 ZYPP Patch Nr: 7918 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 5726 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 sled11-sp1.x86 SAT Patch Nr: 3760 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 sled11-sp1.x86 SAT Patch Nr: 3760 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 sled11-sp1.x86 SAT Patch Nr: 3760 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 sled11-sp1.x86 SAT Patch Nr: 3760 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sles11-sp1.x86 sled11-sp1.x86 SAT Patch Nr: 3760 |
| SLE 11 SP1 DEBUGINFO |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 SAT Patch Nr: 3763 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 SAT Patch Nr: 3763 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 SAT Patch Nr: 3763 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 SAT Patch Nr: 3763 |
| SUSE Linux Enterprise Server 11 SP1 |
| sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 sles11-sp1-vmware.x86-64 SAT Patch Nr: 3763 |
| SUSE Linux Enterprise 10 SP4 DEBUGINFO for IBM POWER |
| sles10-sp4-debuginfo.ppc sle10-sp4-sdk.ppc sles10-sp4.ppc ZYPP Patch Nr: 7913 |
| SLE SDK 10 SP4 for IBM iSeries and IBM pSeries |
| sles10-sp4-debuginfo.ppc sle10-sp4-sdk.ppc sles10-sp4.ppc ZYPP Patch Nr: 7913 |
| SUSE Linux Enterprise Server 10 SP4 for IBM POWER |
| sles10-sp4-debuginfo.ppc sle10-sp4-sdk.ppc sles10-sp4.ppc ZYPP Patch Nr: 7913 |
| SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T |
| sled10-sp4.x86-64 sle10-sp4-sdk.x86-64 sles10-sp4-debuginfo.x86-64 sles10-sp4.x86-64 ZYPP Patch Nr: 7915 |
| SUSE Linux Enterprise 10 SP4 DEBUGINFO for AMD64 and Intel EM64T |
| sled10-sp4.x86-64 sle10-sp4-sdk.x86-64 sles10-sp4-debuginfo.x86-64 sles10-sp4.x86-64 ZYPP Patch Nr: 7915 |
| SLE SDK 10 SP4 for X86-64 |
| sled10-sp4.x86-64 sle10-sp4-sdk.x86-64 sles10-sp4-debuginfo.x86-64 sles10-sp4.x86-64 ZYPP Patch Nr: 7915 |
| SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T |
| sled10-sp4.x86-64 sle10-sp4-sdk.x86-64 sles10-sp4-debuginfo.x86-64 sles10-sp4.x86-64 ZYPP Patch Nr: 7915 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sled10-sp3.x86 sles10-sp3.x86 ZYPP Patch Nr: 7257 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sled10-sp3.x86 sles10-sp3.x86 ZYPP Patch Nr: 7257 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sled10-sp3.x86 sles10-sp3.x86 ZYPP Patch Nr: 7257 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.x86 sles10-sp3-debuginfo.x86 sled10-sp3.x86 sles10-sp3.x86 ZYPP Patch Nr: 7257 |
| Open Enterprise Server |
| sles9-oes.x86 YOU Patch Nr: 12678 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3764 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 5732 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 5732 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 5732 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 5732 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1-vmware.x86-64 sled11-sp1.x86-64 sle11-sp1-hae.x86-64 sles11-sp1.x86-64 SAT Patch Nr: 5732 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sled11-sp1.x86 SAT Patch Nr: 5723 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sled11-sp1.x86 SAT Patch Nr: 5723 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sled11-sp1.x86 SAT Patch Nr: 5723 |
| SUSE Linux Enterprise Server 11 SP1 for VMware |
| sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sled11-sp1.x86 SAT Patch Nr: 5723 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.x86 sle11-sp1-hae.x86 sles11-sp1-vmware.x86 sled11-sp1.x86 SAT Patch Nr: 5723 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 5727 |
| SUSE Linux Enterprise 10 SP4 DEBUGINFO for IBM zSeries 64bit |
| sles10-sp4-debuginfo.s390x sles10-sp4.s390x ZYPP Patch Nr: 7931 |
| SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit |
| sles10-sp4-debuginfo.s390x sles10-sp4.s390x ZYPP Patch Nr: 7931 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.ia64 sle11-sp1-hae.ia64 SAT Patch Nr: 5729 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.ia64 sle11-sp1-hae.ia64 SAT Patch Nr: 5729 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.ia64 sle11-sp1-hae.ia64 SAT Patch Nr: 5729 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sles10-sp3.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7261 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sles10-sp3.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7261 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sles10-sp3.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7261 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sles10-sp3.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7261 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3766 |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 5730 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 5724 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 5724 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 5724 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.s390x sles11-sp1.s390x SAT Patch Nr: 5725 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.s390x sles11-sp1.s390x SAT Patch Nr: 5725 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.s390x sles11-sp1.s390x SAT Patch Nr: 5725 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.ia64 sles10-sp3.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7258 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.ia64 sles10-sp3.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7258 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.ia64 sles10-sp3.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7258 |
| openSUSE 11.3 |
| |
| openSUSE 11.3 |
| |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 3773 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 3773 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.ppc sle11-sp1-hae.ppc SAT Patch Nr: 3773 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7260 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7260 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3765 |
| SUSE Linux Enterprise Real Time 11 SP1 |
| x86-64 SAT Patch Nr: 3859 |
| SLE 11 SP1 DEBUGINFO |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3761 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3761 |
| SUSE Linux Enterprise Server 11 SP1 |
| sle11-sp1-hae.ia64 sles11-sp1.ia64 SAT Patch Nr: 3761 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3767 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3762 |
| SUSE Linux Enterprise High Availability Extension 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3762 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1.s390x sle11-sp1-hae.s390x SAT Patch Nr: 3762 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 3772 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12814 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sle10-sp3-sdk.ppc sles10-sp3.ppc sles10-sp3-debuginfo.ppc ZYPP Patch Nr: 7259 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sle10-sp3-sdk.ppc sles10-sp3.ppc sles10-sp3-debuginfo.ppc ZYPP Patch Nr: 7259 |
| SUSE Linux Enterprise Server 10 SP3 |
| sle10-sp3-sdk.ppc sles10-sp3.ppc sles10-sp3-debuginfo.ppc ZYPP Patch Nr: 7259 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 5731 |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| SUSE Linux Enterprise 10 SP4 DEBUGINFO for IPF |
| sles10-sp4.ia64 sles10-sp4-debuginfo.ia64 sle10-sp4-sdk.ia64 ZYPP Patch Nr: 7912 |
| SLE SDK 10 SP4 for IPF |
| sles10-sp4.ia64 sles10-sp4-debuginfo.ia64 sle10-sp4-sdk.ia64 ZYPP Patch Nr: 7912 |
| SUSE Linux Enterprise Server 10 SP4 for IPF |
| sles10-sp4.ia64 sles10-sp4-debuginfo.ia64 sle10-sp4-sdk.ia64 ZYPP Patch Nr: 7912 |
| SUSE Linux Enterprise Server RT Solution 10 for x86 |
| slert10-sp3.x86-64 slert10-sp3.x86 ZYPP Patch Nr: 7444 |
| SUSE Linux Enterprise Server RT Solution 10 for AMD64 and Intel EM64T |
| slert10-sp3.x86-64 slert10-sp3.x86 ZYPP Patch Nr: 7444 |
| SLE 11 SERVER Unsupported Extras |
| Builds SAT Patch Nr: 5728 |
