[security-alerts] FW: [SA19330] Linux Kernel Buffer Overflow Vulnerabilities

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> 
> TITLE:
> Linux Kernel Buffer Overflow Vulnerabilities
> 
> SECUNIA ADVISORY ID:
> SA19330
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/19330/
> 
> CRITICAL:
> Moderately critical
> 
> IMPACT:
> Unknown
> 
> WHERE:
> From remote
> 
> OPERATING SYSTEM:
> Linux Kernel 2.6.x
> http://secunia.com/product/2719/
> 
> DESCRIPTION:
> Two vulnerabilities have been reported in the Linux Kernel, which has
> an unknown impact.
> 
> 1) An integer overflow error exists within the "do_replace()"
> function in Netfilter. This can be exploited to cause a buffer
> overflow and allows the overwrite of arbitrary amounts of kernel
> memory when data is copied from user space.
> 
> 2) Insufficient memory allocation in "drivers/usb/gadget/rndis.c"
> when handling NDIS response to OID_GEN_SUPPORTED_LIST may cause
> kernel memory corruption.
> 
> SOLUTION:
> Update to version 2.6.16.
> http://www.kernel.org/
> 
> PROVIDED AND/OR DISCOVERED BY:
> 1) Solar Designer
> 2) Shaun Tancheff
> 
> ORIGINAL ADVISORY:
> Kernel.org:
> http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16
> http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2
> .6.git;a=commit;h=ee4bb818ae35f68d1f848eae0a7b150a38eb4168
> http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2
> .6.git;a=commit;h=8763716bfe4d8a16bef28c9947cf9d799b1796a5
>