Detections
Analytics
Mandriva Linux Security Advisory : kernel (MDVSA-2009:329)
high Nessus Plugin ID 48161
Language:
Synopsis
The remote Mandriva Linux host is missing one or more security updates.Description
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel :Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddpN device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams. (CVE-2009-2903)
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname. (CVE-2009-3547)
The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881. (CVE-2009-3612)
net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket. (CVE-2009-3621)
Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.
(CVE-2009-3638)
The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.
(CVE-2009-3726)
The ip_frag_reasm function in ipv4/ip_fragment.c in Linux kernel 2.6.32-rc8, and possibly earlier versions, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function. (CVE-2009-1298)
To update your kernel, please follow the directions located at :
http://www.mandriva.com/en/security/kernelupdate
Solution
Update the affected packages.Plugin Details
Severity: High
ID: 48161
File Name: mandriva_MDVSA-2009-329.nasl
Version: 1.31
Type: local
Family: Mandriva Local Security Checks
Published: 7/30/2010
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.0
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:broadcom-wl-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-desktop-latest, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:broadcom-wl-kernel-server-latest, p-cpe:/a:mandriva:linux:em8300-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:em8300-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:em8300-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:em8300-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:em8300-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:em8300-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:em8300-kernel-desktop-latest, p-cpe:/a:mandriva:linux:em8300-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:em8300-kernel-server-latest, p-cpe:/a:mandriva:linux:fcpci-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:fcpci-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:fcpci-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:fcpci-kernel-desktop-latest, p-cpe:/a:mandriva:linux:fcpci-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:fcpci-kernel-server-latest, p-cpe:/a:mandriva:linux:fglrx-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:fglrx-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:fglrx-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:fglrx-kernel-desktop-latest, p-cpe:/a:mandriva:linux:fglrx-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:fglrx-kernel-server-latest, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-desktop-latest, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:hcfpcimodem-kernel-server-latest, p-cpe:/a:mandriva:linux:hsfmodem-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:hsfmodem-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:hsfmodem-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:hsfmodem-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:hsfmodem-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:hsfmodem-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:hsfmodem-kernel-desktop-latest, p-cpe:/a:mandriva:linux:hsfmodem-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:hsfmodem-kernel-server-latest, p-cpe:/a:mandriva:linux:kernel-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-desktop-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-desktop-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-desktop-devel-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-desktop-devel-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-desktop-devel-latest, p-cpe:/a:mandriva:linux:kernel-desktop-latest, p-cpe:/a:mandriva:linux:kernel-desktop586-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-desktop586-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-desktop586-devel-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-desktop586-devel-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-desktop586-devel-latest, p-cpe:/a:mandriva:linux:kernel-desktop586-latest, p-cpe:/a:mandriva:linux:kernel-doc, p-cpe:/a:mandriva:linux:kernel-server-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-server-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-server-devel-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-server-devel-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-server-devel-latest, p-cpe:/a:mandriva:linux:kernel-server-latest, p-cpe:/a:mandriva:linux:kernel-source-2.6.29.6-3mnb, p-cpe:/a:mandriva:linux:kernel-source-2.6.31.6-1mnb, p-cpe:/a:mandriva:linux:kernel-source-latest, p-cpe:/a:mandriva:linux:libafs-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:libafs-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:libafs-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:libafs-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:libafs-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:libafs-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:libafs-kernel-desktop-latest, p-cpe:/a:mandriva:linux:libafs-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:libafs-kernel-server-latest, p-cpe:/a:mandriva:linux:lirc-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:lirc-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:lirc-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:lirc-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:lirc-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:lirc-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:lirc-kernel-desktop-latest, p-cpe:/a:mandriva:linux:lirc-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:lirc-kernel-server-latest, p-cpe:/a:mandriva:linux:lzma-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:lzma-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:lzma-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:lzma-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:lzma-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:lzma-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:lzma-kernel-desktop-latest, p-cpe:/a:mandriva:linux:lzma-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:lzma-kernel-server-latest, p-cpe:/a:mandriva:linux:madwifi-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:madwifi-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:madwifi-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:madwifi-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:madwifi-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:madwifi-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:madwifi-kernel-desktop-latest, p-cpe:/a:mandriva:linux:madwifi-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:madwifi-kernel-server-latest, p-cpe:/a:mandriva:linux:nvidia-current-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:nvidia-current-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:nvidia-current-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:nvidia-current-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:nvidia-current-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:nvidia-current-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:nvidia-current-kernel-desktop-latest, p-cpe:/a:mandriva:linux:nvidia-current-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:nvidia-current-kernel-server-latest, p-cpe:/a:mandriva:linux:nvidia173-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:nvidia173-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:nvidia173-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:nvidia173-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:nvidia173-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:nvidia173-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:nvidia173-kernel-desktop-latest, p-cpe:/a:mandriva:linux:nvidia173-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:nvidia173-kernel-server-latest, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-desktop-latest, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:nvidia96xx-kernel-server-latest, p-cpe:/a:mandriva:linux:slmodem-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:slmodem-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:slmodem-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:slmodem-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:slmodem-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:slmodem-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:slmodem-kernel-desktop-latest, p-cpe:/a:mandriva:linux:slmodem-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:slmodem-kernel-server-latest, p-cpe:/a:mandriva:linux:squashfs-lzma-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:squashfs-lzma-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:squashfs-lzma-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:squashfs-lzma-kernel-desktop-latest, p-cpe:/a:mandriva:linux:squashfs-lzma-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:squashfs-lzma-kernel-server-latest, p-cpe:/a:mandriva:linux:vboxadditions-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:vboxadditions-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:vboxadditions-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:vboxadditions-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:vboxadditions-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:vboxadditions-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:vboxadditions-kernel-desktop-latest, p-cpe:/a:mandriva:linux:vboxadditions-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:vboxadditions-kernel-server-latest, p-cpe:/a:mandriva:linux:virtualbox-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:virtualbox-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:virtualbox-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:virtualbox-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:virtualbox-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:virtualbox-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:virtualbox-kernel-desktop-latest, p-cpe:/a:mandriva:linux:virtualbox-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:virtualbox-kernel-server-latest, p-cpe:/a:mandriva:linux:vpnclient-kernel-2.6.29.6-desktop-3mnb, p-cpe:/a:mandriva:linux:vpnclient-kernel-2.6.29.6-desktop586-3mnb, p-cpe:/a:mandriva:linux:vpnclient-kernel-2.6.29.6-server-3mnb, p-cpe:/a:mandriva:linux:vpnclient-kernel-2.6.31.6-desktop-1mnb, p-cpe:/a:mandriva:linux:vpnclient-kernel-2.6.31.6-desktop586-1mnb, p-cpe:/a:mandriva:linux:vpnclient-kernel-2.6.31.6-server-1mnb, p-cpe:/a:mandriva:linux:vpnclient-kernel-desktop-latest, p-cpe:/a:mandriva:linux:vpnclient-kernel-desktop586-latest, p-cpe:/a:mandriva:linux:vpnclient-kernel-server-latest, cpe:/o:mandriva:linux:2009.1, cpe:/o:mandriva:linux:2010.0
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/9/2009
Exploitable With
CANVAS (CANVAS)
Core Impact
Reference Information
CVE: CVE-2009-1298, CVE-2009-2903, CVE-2009-3547, CVE-2009-3612, CVE-2009-3621, CVE-2009-3638, CVE-2009-3726, CVE-2009-4131