SB2015031604 - Use-after-free in Linux kernel sctp
Published: March 16, 2015
Security Bulletin ID
SB2015031604
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use-after-free (CVE-ID: CVE-2015-1421)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The vulnerability exists due to a use-after-free error within the sctp_assoc_update() function in net/sctp/associola.c. A remote non-authenticated attacker can execute arbitrary code.
Remediation
Install update from vendor's website.
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=600ddd6825543962fb807884169e57b580dba208
- https://github.com/torvalds/linux/commit/600ddd6825543962fb807884169e57b580dba208
- http://www.openwall.com/lists/oss-security/2015/01/29/15
- https://bugzilla.redhat.com/show_bug.cgi?id=1196581
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8
- http://www.debian.org/security/2015/dsa-3170
- http://www.ubuntu.com/usn/USN-2541-1
- http://www.ubuntu.com/usn/USN-2542-1
- http://rhn.redhat.com/errata/RHSA-2015-0726.html
- http://rhn.redhat.com/errata/RHSA-2015-0751.html
- http://www.ubuntu.com/usn/USN-2545-1
- http://www.ubuntu.com/usn/USN-2546-1
- http://rhn.redhat.com/errata/RHSA-2015-0782.html
- http://www.securitytracker.com/id/1032172
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
- http://www.ubuntu.com/usn/USN-2563-1
- http://www.ubuntu.com/usn/USN-2562-1
- http://www.securityfocus.com/bid/72356
- http://rhn.redhat.com/errata/RHSA-2015-1082.html
- http://rhn.redhat.com/errata/RHSA-2015-0864.html