| Summary: | Several vulnerabilities have been discovered in the Linux kernel that;may lead to a privilege escalation, denial of service or information;leaks.;;CVE-2017-0861;;Robb Glasser reported a potential use-after-free in the ALSA (sound);PCM core. We believe this was not possible in practice.;;CVE-2017-5715;;Multiple researchers have discovered a vulnerability in various;processors supporting speculative execution, enabling an attacker;controlling an unprivileged process to read memory from arbitrary;addresses, including from the kernel and all other processes;running on the system.;;This specific attack has been named Spectre variant 2 (branch;target injection) and is mitigated for the x86 architecture (amd64;and i386) by using the 'retpoline' compiler feature which allows;indirect branches to be isolated from speculative execution.;;CVE-2017-13166;;A bug in the 32-bit compatibility layer of the v4l2 ioctl handling;code has been found. Memory protections ensuring user-provided;buffers always point to userland memory were disabled, allowing;destination addresses to be in kernel space. On a 64-bit kernel;(amd64 flavour) a local user with access to a suitable video;device can exploit this to overwrite kernel memory, leading to;privilege escalation.;;Description truncated. Please see the references for more information. |
| Description: | Summary:
Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks.
CVE-2017-0861
Robb Glasser reported a potential use-after-free in the ALSA (sound)
PCM core. We believe this was not possible in practice.
CVE-2017-5715
Multiple researchers have discovered a vulnerability in various
processors supporting speculative execution, enabling an attacker
controlling an unprivileged process to read memory from arbitrary
addresses, including from the kernel and all other processes
running on the system.
This specific attack has been named Spectre variant 2 (branch
target injection) and is mitigated for the x86 architecture (amd64
and i386) by using the 'retpoline' compiler feature which allows
indirect branches to be isolated from speculative execution.
CVE-2017-13166
A bug in the 32-bit compatibility layer of the v4l2 ioctl handling
code has been found. Memory protections ensuring user-provided
buffers always point to userland memory were disabled, allowing
destination addresses to be in kernel space. On a 64-bit kernel
(amd64 flavour) a local user with access to a suitable video
device can exploit this to overwrite kernel memory, leading to
privilege escalation.
Description truncated. Please see the references for more information.
Affected Software/OS:
linux on Debian Linux
Solution:
For Debian 7 'Wheezy', these problems have been fixed in version
3.2.101-1. This version also includes bug fixes from upstream versions
up to and including 3.2.101. It also fixes a regression in the
procfs hidepid option in the previous version (Debian bug #887106).
We recommend that you upgrade your linux packages.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
