Oracle Linux 5 : Unbreakable Enterprise kernel (ELSA-2010-2008)

This script is Copyright (C) 2013 Tenable Network Security, Inc.


Synopsis :

The remote Oracle Linux host is missing one or more security updates.

Description :

Description of changes:

Following security fixes are included in this unbreakable enterprise
kernel errata:

CVE-2010-2942
The actions implementation in the network queueing functionality in the
Linux kernel before 2.6.36-rc2 does not properly initialize certain
structure members when performing dump operations, which allows local
users to obtain potentially sensitive information from kernel memory via
vectors related to (1) the tcf_gact_dump function in
net/sched/act_gact.c, (2) the tcf_mirred_dump function in
net/sched/act_mirred.c, (3) the tcf_nat_dump function in
net/sched/act_nat.c, (4) the tcf_simp_dump function in
net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in
net/sched/act_skbedit.c.

CVE-2010-2943
The xfs implementation in the Linux kernel before 2.6.35 does not look
up inode allocation btrees before reading inode buffers, which allows
remote authenticated users to read unlinked files, or read or overwrite
disk blocks that are currently assigned to an active file but were
previously assigned to an unlinked file, by accessing a stale NFS file
handle.

OCFS2
Fix to prevent kernel panic caused by corrupted fast symlinks in ocfs2
filesystem.

[2.6.32-100.20.1.el5]
- [fs] xfs: return inode fork offset in bulkstat for fsr (Dave Chinner)
- [fs] xfs: always use iget in bulkstat (Dave Chinner) {CVE-2010-2943}
- [fs] xfs: validate untrusted inode numbers during lookup (Dave
Chinner) {CVE-2010-2943}
- [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave
Chinner) {CVE-2010-2943}
- [net] net sched: fix some kernel memory leaks (Eric Dumazet)
{CVE-2010-2942}
- [fs] ocfs2: Don't walk off the end of fast symlinks (Joel Becker)

See also :

https://oss.oracle.com/pipermail/el-errata/2010-October/001671.html

Solution :

Update the affected unbreakable enterprise kernel packages.

Risk factor :

High / CVSS Base Score : 7.9
(CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:N)

Family: Oracle Linux Local Security Checks

Nessus Plugin ID: 68172 ()

Bugtraq ID:

CVE ID: CVE-2010-2942
CVE-2010-2943