SUSE-SU-2018:3272-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2018/suse-su-20183272-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:3272-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:3272-1

Related

Published

2018-10-22T09:17:39Z

Modified

2018-10-22T09:17:39Z

Summary

Security update for the Linux Kernel (Live Patch 0 for SLE 15)

Details

This update for the Linux Kernel 4.12.14-23 fixes several issues.

The following security issues were fixed:

CVE-2018-17182: The vmacacheflushall function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bsc#1110233).
CVE-2018-14633: A security flaw was found in the chapservercompute_md5() function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. (bsc#1107832).

References

Affected packages

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_1

Package

Name: kernel-livepatch-SLE15_Update_1
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_3-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_2

Package

Name: kernel-livepatch-SLE15_Update_2
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_6-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_5

Package

Name: kernel-livepatch-SLE15_Update_5
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_19-default": "2-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_4

Package

Name: kernel-livepatch-SLE15_Update_4
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_16-default": "3-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_0

Package

Name: kernel-livepatch-SLE15_Update_0
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-13.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-23-default": "5-13.2"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_1

Package

Name: kernel-livepatch-SLE15_Update_1
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_3-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_2

Package

Name: kernel-livepatch-SLE15_Update_2
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_6-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_5

Package

Name: kernel-livepatch-SLE15_Update_5
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_19-default": "2-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_4

Package

Name: kernel-livepatch-SLE15_Update_4
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_16-default": "3-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_0

Package

Name: kernel-livepatch-SLE15_Update_0
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-13.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-23-default": "5-13.2"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_1

Package

Name: kernel-livepatch-SLE15_Update_1
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_3-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_2

Package

Name: kernel-livepatch-SLE15_Update_2
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_6-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_5

Package

Name: kernel-livepatch-SLE15_Update_5
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_19-default": "2-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_4

Package

Name: kernel-livepatch-SLE15_Update_4
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_16-default": "3-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_0

Package

Name: kernel-livepatch-SLE15_Update_0
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-13.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-23-default": "5-13.2"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_1

Package

Name: kernel-livepatch-SLE15_Update_1
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_3-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_2

Package

Name: kernel-livepatch-SLE15_Update_2
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_6-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_5

Package

Name: kernel-livepatch-SLE15_Update_5
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_19-default": "2-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_4

Package

Name: kernel-livepatch-SLE15_Update_4
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_16-default": "3-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_0

Package

Name: kernel-livepatch-SLE15_Update_0
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-13.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-23-default": "5-13.2"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_1

Package

Name: kernel-livepatch-SLE15_Update_1
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_3-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_2

Package

Name: kernel-livepatch-SLE15_Update_2
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_6-default": "5-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_5

Package

Name: kernel-livepatch-SLE15_Update_5
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_19-default": "2-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_4

Package

Name: kernel-livepatch-SLE15_Update_4
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-25_16-default": "3-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 15 / kernel-livepatch-SLE15_Update_0

Package

Name: kernel-livepatch-SLE15_Update_0
Purl: purl:rpm/suse/kernel-livepatch-SLE15_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5-13.2

Ecosystem specific

{
    "binaries": [
        {
            "kernel-livepatch-4_12_14-23-default": "5-13.2"
        }
    ]
}