Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE Linux 11 SP2: 2013:1022-2 Important Kernel Information Leak Fix

suse
Calendar Grey June 17, 2013
Scroller Suse
The Linux kernel has been bolstered with patches addressing 14 notable security flaws, aiming to fortify defenses against potential exploits and cybersecurity weaknesses.
An update that solves 14 vulnerabilities and has 38 fixes An update that solves 14 vulnerabilities and has 38 fixes An update that solves 14 vulnerabilities and has 38 fixes is now...

Summary

The SUSE Linux Enterprise 11 Service Pack 2 kernel has been updated to Linux kernel 3.0.80 which fixes various bugs and security issues. The following security issues have been fixed: * CVE-2013-0160: Timing side channel on attacks were possible on /dev/ptmx that could allow local attackers to predict keypresses like e.g. passwords. This has been fixed again by updating accessed/modified time on the pty devices in resolution of 8 seconds, so that idle time detection can still work. * CVE-2013-3222: The vcc_recvmsg function in net/atm/common.c in the Linux kernel did not initialize a certain length variable, which allowed local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. * CVE-2013-3223: The ax25_recvmsg function in

Topics%20covered

Topics Covered

security advisory information leak important kernel SUSE Linux memory exposure local attacks

References

#763968 #764209 #768052 #769685 #788590 #792584

#793139 #797042 #797175 #800907 #802153 #804154

#804609 #805804 #805945 #806431 #806980 #808647

#809122 #809155 #809748 #809895 #810580 #810624

#810722 #812281 #814719 #815356 #815444 #815745

#816443 #816451 #816586 #816668 #816708 #817010

#817339 #818053 #818327 #818371 #818514 #818516

#818798 #819295 #819519 #819655 #819789 #820434

#821560 #821930 #822431 #822722

Cross- CVE-2013-0160 CVE-2013-1979 CVE-2013-3076

CVE-2013-3222 CVE-2013-3223 CVE-2013-3224

CVE-2013-3225 CVE-2013-3227 CVE-2013-3228

CVE-2013-3229 CVE-2013-3231 CVE-2013-3232

CVE-2013-3234 CVE-2013-3235

Affected Products:

SUSE Linux Enterprise Server 11 SP2 for VMware

SUSE Linux Enterprise Server...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2013:1022-2
Rating: important

Topics%20covered

Topics Covered

security advisory information leak important kernel SUSE Linux memory exposure local attacks

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.