<p>Upgrade <code>Oracle:5</code> <code>kernel-uek-debug</code> to version 0:2.6.39-400.297.11.el5uek or higher.<br>This issue was patched in <code>ELSA-2017-3633</code>.</p>

Out-of-bounds Write Affecting kernel-uek-debug package, versions <0:2.6.39-400.297.11.el5uek

Threat Intelligence

0.06% (27^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-ORACLE5-KERNELUEKDEBUG-2522431
published 10 Apr 2022
disclosed 5 Oct 2017

Report a new vulnerability Found a mistake?

Introduced: 5 Oct 2017

CVE-2017-1000111 Open this link in a new tab CWE-787 Open this link in a new tab

How to fix?

Upgrade Oracle:5 kernel-uek-debug to version 0:2.6.39-400.297.11.el5uek or higher.
This issue was patched in ELSA-2017-3633.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-uek-debug package and not the kernel-uek-debug package as distributed by Oracle. See How to fix? for Oracle:5 relevant fixed versions and status.

Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.

References

CVSS Scores

version 3.1

Attack Vector (AV)

Local
Attack Complexity (AC)

Low
Privileges Required (PR)

Low
User Interaction (UI)

None

Scope (S)

Unchanged

Confidentiality (C)

High
Integrity (I)

High
Availability (A)

High