Advisories

CERT-In Advisory CIAD-2010-0061

Multiple Vulnerabilities in Redhat Linux Kernel

Original Issue Date: August 23, 2010

Severity Rating: Medium

Systems Affected

Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux AS (v. 4.8.z)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux ES (v. 4.8.z)
Red Hat Enterprise Linux WS (v. 4)

Overview

Multiple vulnerabilities have been reported in the Linux Kernel which could be exploited by attackers to execute arbitrary code or cause a Denial of Service condition (kernel panic) on the affected systems.

Description

1. Linux Kernel NFS Server-Side XDR Buffer Overflow Arbitrary Code Execution Vulnerability ( CVE-2010-2521 )

This issue occurs due to buffer overflow error in the implementation of Linux Kernel server-side External Data Representation (XDR) for the Network File System (NFS) version 4. A remote attacker on a local network can exploit this vulnerability by sending a specially crafted large compound request to the NFSv4.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code with the privileges of target service or to cause a Denial of Service (Kernel panic) condition.

2. Linux Kernel CIFS CIFSSMBWrite DoS Vulnerability ( CVE-2010-2248 )

This vulnerability occurs due to an error in the "CIFSSMBWrite()" function in the Linux kernel Common Internet File System (CIFS) implementation . A remote attacker could exploit this vulnerability by sending a specially crafted SMB packet. Successful exploitation of this vulnerability could cause (Kernel Panic) Denial of Service (DoS) condition.

Solution

Upgrade the affected packages :
http://rhn.redhat.com/

Vendor Information

RedHat
https://rhn.redhat.com/errata/RHSA-2010-0606.html

References

Securityfocus
http://www.securityfocus.com/bid/42249
http://www.securityfocus.com/bid/42242

RedHat
https://bugzilla.redhat.com/show_bug.cgi?id=612028
https://bugzilla.redhat.com/show_bug.cgi?id=608583

SecurityTracker
http://securitytracker.com/alerts/2010/Aug/1024317.html
http://securitytracker.com/alerts/2010/Aug/1024285.html

VUPEN
http://www.vupen.com/english/advisories/2010/2017

CVE Name
CVE-2010-2248
CVE-2010-2521

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India