Novell Home

CVE-2013-1928

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-1928 at MITRE

Description

The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.

NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

Novell Bugzilla entry: 813735

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
  • kernel-default >= 2.6.16.60-0.113.1
  • kernel-source >= 2.6.16.60-0.113.1
  • kernel-syms >= 2.6.16.60-0.113.1
Builds
ZYPP Patch Nr: 8755
SUSE Linux Enterprise Server 11 SP1 LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-xen >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-xen >= 0_2.6.32.59_0.9-7.9.118
  • hyper-v-kmp-default >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-trace >= 0_2.6.32.59_0.9-0.18.37
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-ec2 >= 2.6.32.59-0.9.1
  • kernel-ec2-base >= 2.6.32.59-0.9.1
  • kernel-ec2-devel >= 2.6.32.59-0.9.1
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
  • kernel-xen >= 2.6.32.59-0.9.1
  • kernel-xen-base >= 2.6.32.59-0.9.1
  • kernel-xen-devel >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8849
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-smp >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
  • kernel-xen >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8587
SLE SDK 10 SP4 for X86-64
  • kernel-debug >= 2.6.16.60-0.103.1
  • kernel-kdump >= 2.6.16.60-0.103.1
  • kernel-xen >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8587
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T
  • kernel-debug >= 2.6.16.60-0.103.1
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-kdump >= 2.6.16.60-0.103.1
  • kernel-smp >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
  • kernel-xen >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8587
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8586
SUSE Linux Enterprise Desktop 10 SP4 for x86
  • kernel-bigsmp >= 2.6.16.60-0.103.1
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-smp >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
  • kernel-xen >= 2.6.16.60-0.103.1
  • kernel-xenpae >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8583
SLE SDK 10 SP4 for x86
  • kernel-debug >= 2.6.16.60-0.103.1
  • kernel-kdump >= 2.6.16.60-0.103.1
  • kernel-xen >= 2.6.16.60-0.103.1
  • kernel-xenpae >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8583
SUSE Linux Enterprise Server 10 SP4 for x86
  • kernel-bigsmp >= 2.6.16.60-0.103.1
  • kernel-debug >= 2.6.16.60-0.103.1
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-kdump >= 2.6.16.60-0.103.1
  • kernel-kdumppae >= 2.6.16.60-0.103.1
  • kernel-smp >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
  • kernel-vmi >= 2.6.16.60-0.103.1
  • kernel-vmipae >= 2.6.16.60-0.103.1
  • kernel-xen >= 2.6.16.60-0.103.1
  • kernel-xenpae >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8583
SLE 11 SERVER Unsupported Extras
  • kernel-default-extra >= 2.6.32.59-0.9.1
  • kernel-pae-extra >= 2.6.32.59-0.9.1
  • kernel-xen-extra >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8850
SLE SDK 10 SP4 for IBM iSeries and IBM pSeries
  • kernel-kdump >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8585
SUSE Linux Enterprise Server 10 SP4 for IBM POWER
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-iseries64 >= 2.6.16.60-0.103.1
  • kernel-kdump >= 2.6.16.60-0.103.1
  • kernel-ppc64 >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8585
SLE 11 SERVER Unsupported Extras
  • kernel-default-extra >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8851
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
  • kernel-debug >= 2.6.16.60-0.113.1
  • kernel-default >= 2.6.16.60-0.113.1
  • kernel-kdump >= 2.6.16.60-0.113.1
  • kernel-smp >= 2.6.16.60-0.113.1
  • kernel-source >= 2.6.16.60-0.113.1
  • kernel-syms >= 2.6.16.60-0.113.1
  • kernel-xen >= 2.6.16.60-0.113.1
Builds
ZYPP Patch Nr: 8756
SLE SDK 10 SP4 for IPF
  • kernel-debug >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8584
SUSE Linux Enterprise Server 10 SP4 for IPF
  • kernel-debug >= 2.6.16.60-0.103.1
  • kernel-default >= 2.6.16.60-0.103.1
  • kernel-source >= 2.6.16.60-0.103.1
  • kernel-syms >= 2.6.16.60-0.103.1
Builds
ZYPP Patch Nr: 8584
SLE 11 SERVER Unsupported Extras
  • kernel-default-extra >= 2.6.32.59-0.9.1
  • kernel-xen-extra >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8852
SUSE Linux Enterprise Server 11 SP1 LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-pae >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-xen >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-pae >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-xen >= 0_2.6.32.59_0.9-7.9.118
  • hyper-v-kmp-default >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-pae >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-trace >= 0_2.6.32.59_0.9-0.18.37
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-ec2 >= 2.6.32.59-0.9.1
  • kernel-ec2-base >= 2.6.32.59-0.9.1
  • kernel-ec2-devel >= 2.6.32.59-0.9.1
  • kernel-pae >= 2.6.32.59-0.9.1
  • kernel-pae-base >= 2.6.32.59-0.9.1
  • kernel-pae-devel >= 2.6.32.59-0.9.1
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
  • kernel-xen >= 2.6.32.59-0.9.1
  • kernel-xen-base >= 2.6.32.59-0.9.1
  • kernel-xen-devel >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8847
SUSE Linux Enterprise Server 11 SP1 LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-default-man >= 2.6.32.59-0.9.1
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8848
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
  • kernel-bigsmp >= 2.6.16.60-0.113.1
  • kernel-debug >= 2.6.16.60-0.113.1
  • kernel-default >= 2.6.16.60-0.113.1
  • kernel-kdump >= 2.6.16.60-0.113.1
  • kernel-kdumppae >= 2.6.16.60-0.113.1
  • kernel-smp >= 2.6.16.60-0.113.1
  • kernel-source >= 2.6.16.60-0.113.1
  • kernel-syms >= 2.6.16.60-0.113.1
  • kernel-vmi >= 2.6.16.60-0.113.1
  • kernel-vmipae >= 2.6.16.60-0.113.1
  • kernel-xen >= 2.6.16.60-0.113.1
  • kernel-xenpae >= 2.6.16.60-0.113.1
Builds
ZYPP Patch Nr: 8754

List of products where fixes are in QA

SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP3 LTSS for x86

© 2014 Novell