CVE-2013-4588
SLE 11 SERVER Unsupported Extras,SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T,SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit,SUSE Linux Enterprise Server 10 SP3 LTSS for x86,SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T,SUSE Linux Enterprise Server 10 SP4 LTSS for IBM zSeries 64bit,SUSE Linux Enterprise Server 10 SP4 LTSS for x86,SUSE Linux Enterprise Server 11 SP1 LTSS
CVE-2013-4588, security advisory, novell, suse linux, suse, security, cve

CVE-2013-4588

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-4588 at MITRE

Description

Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability for (1) a getsockopt system call, related to the do_ip_vs_get_ctl function, or (2) a setsockopt system call, related to the do_ip_vs_set_ctl function.

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 6.56
Vector AV:L/AC:M/Au:S/C:C/I:C/A:C
Access Vector Local
Access Complexity Medium
Authentication Single
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
SUSE Bugzilla entry: 851095 [CLOSED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1-LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-pae >= 0_2.6.32.59_0.13-0.3.163
  • btrfs-kmp-xen >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-pae >= 0_2.6.32.59_0.13-7.9.130
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-xen >= 0_2.6.32.59_0.9-7.9.118
  • hyper-v-kmp-default >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-pae >= 0_2.6.32.59_0.13-0.18.39
  • hyper-v-kmp-trace >= 0_2.6.32.59_0.9-0.18.37
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-default-man >= 2.6.32.59-0.15.2
  • kernel-ec2 >= 2.6.32.59-0.9.1
  • kernel-ec2-base >= 2.6.32.59-0.9.1
  • kernel-ec2-devel >= 2.6.32.59-0.9.1
  • kernel-pae >= 2.6.32.59-0.15.2
  • kernel-pae-base >= 2.6.32.59-0.15.2
  • kernel-pae-devel >= 2.6.32.59-0.15.2
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
  • kernel-xen >= 2.6.32.59-0.9.1
  • kernel-xen-base >= 2.6.32.59-0.9.1
  • kernel-xen-devel >= 2.6.32.59-0.9.1
  • xen-kmp-default >= 4.0.3_21548_18_2.6.32.59_0.19-0.9.17
  • xen-kmp-pae >= 4.0.3_21548_16_2.6.32.59_0.15-0.5.26
  • xen-kmp-trace >= 4.0.3_21548_18_2.6.32.59_0.19-0.9.17
Patchnames:
slessp1-kernel
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
  • kernel-bigsmp >= 2.6.16.60-0.123.1
  • kernel-debug >= 2.6.16.60-0.123.1
  • kernel-default >= 2.6.16.60-0.123.1
  • kernel-kdump >= 2.6.16.60-0.123.1
  • kernel-kdumppae >= 2.6.16.60-0.123.1
  • kernel-smp >= 2.6.16.60-0.123.1
  • kernel-source >= 2.6.16.60-0.123.1
  • kernel-syms >= 2.6.16.60-0.123.1
  • kernel-vmi >= 2.6.16.60-0.123.1
  • kernel-vmipae >= 2.6.16.60-0.123.1
  • kernel-xen >= 2.6.16.60-0.123.1
  • kernel-xenpae >= 2.6.16.60-0.123.1
Builds
ZYPP Patch Nr: 8876
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
  • kernel-default >= 2.6.16.60-0.123.1
  • kernel-source >= 2.6.16.60-0.123.1
  • kernel-syms >= 2.6.16.60-0.123.1
Builds
ZYPP Patch Nr: 8878
SUSE Linux Enterprise Server 11 SP1 LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-xen >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-xen >= 0_2.6.32.59_0.9-7.9.118
  • hyper-v-kmp-default >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-trace >= 0_2.6.32.59_0.9-0.18.37
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-ec2 >= 2.6.32.59-0.9.1
  • kernel-ec2-base >= 2.6.32.59-0.9.1
  • kernel-ec2-devel >= 2.6.32.59-0.9.1
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
  • kernel-xen >= 2.6.32.59-0.9.1
  • kernel-xen-base >= 2.6.32.59-0.9.1
  • kernel-xen-devel >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8849
SLE 11 SERVER Unsupported Extras
  • kernel-default-extra >= 2.6.32.59-0.9.1
  • kernel-pae-extra >= 2.6.32.59-0.9.1
  • kernel-xen-extra >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8850
SLE 11 SERVER Unsupported Extras
  • kernel-default-extra >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8851
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
  • kernel-debug >= 2.6.16.60-0.123.1
  • kernel-default >= 2.6.16.60-0.123.1
  • kernel-kdump >= 2.6.16.60-0.123.1
  • kernel-smp >= 2.6.16.60-0.123.1
  • kernel-source >= 2.6.16.60-0.123.1
  • kernel-syms >= 2.6.16.60-0.123.1
  • kernel-xen >= 2.6.16.60-0.123.1
Builds
ZYPP Patch Nr: 8877
SUSE Linux Enterprise Server 10 SP4 LTSS for IBM zSeries 64bit
  • kernel-default >= 2.6.16.60-0.105.1
  • kernel-source >= 2.6.16.60-0.105.1
  • kernel-syms >= 2.6.16.60-0.105.1
Builds
ZYPP Patch Nr: 8816
SLE 11 SERVER Unsupported Extras
  • kernel-default-extra >= 2.6.32.59-0.9.1
  • kernel-xen-extra >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8852
SUSE Linux Enterprise Server 11 SP1 LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-pae >= 0_2.6.32.59_0.9-0.3.151
  • btrfs-kmp-xen >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-pae >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-xen >= 0_2.6.32.59_0.9-7.9.118
  • hyper-v-kmp-default >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-pae >= 0_2.6.32.59_0.9-0.18.37
  • hyper-v-kmp-trace >= 0_2.6.32.59_0.9-0.18.37
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-ec2 >= 2.6.32.59-0.9.1
  • kernel-ec2-base >= 2.6.32.59-0.9.1
  • kernel-ec2-devel >= 2.6.32.59-0.9.1
  • kernel-pae >= 2.6.32.59-0.9.1
  • kernel-pae-base >= 2.6.32.59-0.9.1
  • kernel-pae-devel >= 2.6.32.59-0.9.1
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
  • kernel-xen >= 2.6.32.59-0.9.1
  • kernel-xen-base >= 2.6.32.59-0.9.1
  • kernel-xen-devel >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8847
SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T
  • kernel-debug >= 2.6.16.60-0.105.1
  • kernel-default >= 2.6.16.60-0.105.1
  • kernel-kdump >= 2.6.16.60-0.105.1
  • kernel-smp >= 2.6.16.60-0.105.1
  • kernel-source >= 2.6.16.60-0.105.1
  • kernel-syms >= 2.6.16.60-0.105.1
  • kernel-xen >= 2.6.16.60-0.105.1
Builds
ZYPP Patch Nr: 8818
SUSE Linux Enterprise Server 10 SP4 LTSS for x86
  • kernel-bigsmp >= 2.6.16.60-0.105.1
  • kernel-debug >= 2.6.16.60-0.105.1
  • kernel-default >= 2.6.16.60-0.105.1
  • kernel-kdump >= 2.6.16.60-0.105.1
  • kernel-kdumppae >= 2.6.16.60-0.105.1
  • kernel-smp >= 2.6.16.60-0.105.1
  • kernel-source >= 2.6.16.60-0.105.1
  • kernel-syms >= 2.6.16.60-0.105.1
  • kernel-vmi >= 2.6.16.60-0.105.1
  • kernel-vmipae >= 2.6.16.60-0.105.1
  • kernel-xen >= 2.6.16.60-0.105.1
  • kernel-xenpae >= 2.6.16.60-0.105.1
Builds
ZYPP Patch Nr: 8817
SUSE Linux Enterprise Server 11 SP1 LTSS
  • btrfs-kmp-default >= 0_2.6.32.59_0.9-0.3.151
  • ext4dev-kmp-default >= 0_2.6.32.59_0.9-7.9.118
  • ext4dev-kmp-trace >= 0_2.6.32.59_0.9-7.9.118
  • kernel-default >= 2.6.32.59-0.9.1
  • kernel-default-base >= 2.6.32.59-0.9.1
  • kernel-default-devel >= 2.6.32.59-0.9.1
  • kernel-default-man >= 2.6.32.59-0.9.1
  • kernel-source >= 2.6.32.59-0.9.1
  • kernel-syms >= 2.6.32.59-0.9.1
  • kernel-trace >= 2.6.32.59-0.9.1
  • kernel-trace-base >= 2.6.32.59-0.9.1
  • kernel-trace-devel >= 2.6.32.59-0.9.1
Builds
SAT Patch Nr: 8848