|
|
| |
|
| |
kernel: multiple vulnerabilities
| Package(s): | kernel |
CVE #(s): | CVE-2008-3911
CVE-2008-4618
|
| Created: | October 27, 2008 |
Updated: | January 22, 2009 |
| Description: |
From the SUSE advisory:
CVE-2008-3911: The proc_do_xprt function in net/sunrpc/sysctl.c in
the Linux kernel 2.6.26.3 does not check the length of a certain
buffer obtained from user space, which allows local users to overflow
a stack-based buffer and have unspecified other impact via a crafted
read system call for the /proc/sys/sunrpc/transports file.
CVE-2008-4618: Fixed a kernel panic in SCTP while process protocol
violation parameter.
|
| Alerts: |
|
( Log in to post comments)
|
|
|