SUSE SLES15 Security Update : kernel (SUSE-SU-2021:3806-1)

high Nessus Plugin ID 178280

Language:

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3806-1 advisory.

- In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References:
Upstream kernel (CVE-2021-0941)

- A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well. (CVE-2021-20322)

- An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi- device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability. (CVE-2021-31916)

- A flaw was found in the Linux kernel's CAPI over Bluetooth connection code. An attacker with a local account can escalate privileges when CAPI (ISDN) hardware connection fails. (CVE-2021-34981)

- hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
(CVE-2021-37159)

- An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. (CVE-2021-43389)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://bugzilla.suse.com/1094840

https://bugzilla.suse.com/1133021

https://bugzilla.suse.com/1152489

https://bugzilla.suse.com/1154353

https://bugzilla.suse.com/1157177

https://bugzilla.suse.com/1167773

https://bugzilla.suse.com/1169263

https://bugzilla.suse.com/1170269

https://bugzilla.suse.com/1176940

https://bugzilla.suse.com/1180749

https://bugzilla.suse.com/1184924

https://bugzilla.suse.com/1188601

https://bugzilla.suse.com/1190523

https://bugzilla.suse.com/1190795

https://bugzilla.suse.com/1191628

https://bugzilla.suse.com/1191790

https://bugzilla.suse.com/1191851

https://bugzilla.suse.com/1191958

https://bugzilla.suse.com/1191961

https://bugzilla.suse.com/1191980

https://bugzilla.suse.com/1192045

https://bugzilla.suse.com/1192217

https://bugzilla.suse.com/1192229

https://bugzilla.suse.com/1192267

https://bugzilla.suse.com/1192273

https://bugzilla.suse.com/1192288

https://bugzilla.suse.com/1192328

https://bugzilla.suse.com/1192375

https://bugzilla.suse.com/1192473

https://bugzilla.suse.com/1192549

https://bugzilla.suse.com/1192718

https://bugzilla.suse.com/1192740

https://bugzilla.suse.com/1192745

https://bugzilla.suse.com/1192750

https://bugzilla.suse.com/1192753

https://bugzilla.suse.com/1192758

https://bugzilla.suse.com/1192781

https://bugzilla.suse.com/1192802

https://bugzilla.suse.com/1192896

https://bugzilla.suse.com/1192906

https://bugzilla.suse.com/1192918

http://www.nessus.org/u?77d7657c

https://www.suse.com/security/cve/CVE-2021-0941

https://www.suse.com/security/cve/CVE-2021-20322

https://www.suse.com/security/cve/CVE-2021-31916

https://www.suse.com/security/cve/CVE-2021-34981

https://www.suse.com/security/cve/CVE-2021-37159

https://www.suse.com/security/cve/CVE-2021-43389

Plugin Details

Severity: High

ID: 178280

File Name: suse_SU-2021-3806-1.nasl

Version: 1.0

Type: local

Agent: unix

Published: 7/13/2023

Updated: 7/13/2023

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2021-0941

CVSS v3

Risk Factor: High

Base Score: 7.4

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2021-20322

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:kernel-azure, p-cpe:/a:novell:suse_linux:kernel-azure-devel, p-cpe:/a:novell:suse_linux:kernel-devel-azure, p-cpe:/a:novell:suse_linux:kernel-source-azure, p-cpe:/a:novell:suse_linux:kernel-syms-azure, cpe:/o:novell:suse_linux:15

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/25/2021

Vulnerability Publication Date: 5/6/2021

Reference Information

CVE: CVE-2021-0941, CVE-2021-20322, CVE-2021-31916, CVE-2021-34981, CVE-2021-37159, CVE-2021-43389

SuSE: SUSE-SU-2021:3806-1