ISS X-Force Database: linux-kernel-ber-decoder-bo(42921): Linux kernel BER decoder buffer overflow

Linux kernel BER decoder buffer overflow

linux-kernel-ber-decoder-bo (42921)

High Risk

Description:

Linux kernel is vulnerable to a buffer overflow, caused by improper bounds checking by the ASN.1 BER decoder of the cifs and ip_nat_snmp_basic modules. By sending specially-crafted BER encoded data, a remote attacker from within the local network could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

Platforms Affected:

Canonical, Ubuntu 6.06 LTS
Canonical, Ubuntu 7.04
Canonical, Ubuntu 7.10
Canonical, Ubuntu 8.04 LTS
Debian, Debian Linux 4.0
Linux, Kernel 2.4.0 test8
Linux, Kernel 2.4.0 test9
Linux, Kernel 2.4.0
Linux, Kernel 2.4.0 test1
Linux, Kernel 2.4.0 test10
Linux, Kernel 2.4.0 test11
Linux, Kernel 2.4.0 test12
Linux, Kernel 2.4.0 test2
Linux, Kernel 2.4.0 test3
Linux, Kernel 2.4.0 test4
Linux, Kernel 2.4.0 test5
Linux, Kernel 2.4.0 test6
Linux, Kernel 2.4.0 test7
Linux, Kernel 2.4.1
Linux, Kernel 2.4.10
Linux, Kernel 2.4.11
Linux, Kernel 2.4.12
Linux, Kernel 2.4.13
Linux, Kernel 2.4.14
Linux, Kernel 2.4.15
Linux, Kernel 2.4.16
Linux, Kernel 2.4.17
Linux, Kernel 2.4.18 pre8
Linux, Kernel 2.4.18 pre7
Linux, Kernel 2.4.18 pre6
Linux, Kernel 2.4.18 pre5
Linux, Kernel 2.4.18
Linux, Kernel 2.4.18 pre3
Linux, Kernel 2.4.18 pre2
Linux, Kernel 2.4.18 pre1
Linux, Kernel 2.4.18 pre4
Linux, Kernel 2.4.19 pre1
Linux, Kernel 2.4.19 pre2
Linux, Kernel 2.4.19 pre3
Linux, Kernel 2.4.19 pre4
Linux, Kernel 2.4.19 pre5
Linux, Kernel 2.4.19 pre6
Linux, Kernel 2.4.19
Linux, Kernel 2.4.2
Linux, Kernel 2.4.20
Linux, Kernel 2.4.21 pre7
Linux, Kernel 2.4.21 pre1
Linux, Kernel 2.4.21 pre4
Linux, Kernel 2.4.21
Linux, Kernel 2.4.22
Linux, Kernel 2.4.23
Linux, Kernel 2.4.23 pre9
Linux, Kernel 2.4.23 ow2
Linux, Kernel 2.4.24 ow1
Linux, Kernel 2.4.24
Linux, Kernel 2.4.25
Linux, Kernel 2.4.26
Linux, Kernel 2.4.27 pre5
Linux, Kernel 2.4.27 pre1
Linux, Kernel 2.4.27 pre3
Linux, Kernel 2.4.27 pre4
Linux, Kernel 2.4.27
Linux, Kernel 2.4.27 pre2
Linux, Kernel 2.4.28
Linux, Kernel 2.4.29 rc2
Linux, Kernel 2.4.29
Linux, Kernel 2.4.29 rc1
Linux, Kernel 2.4.3
Linux, Kernel 2.4.30
Linux, Kernel 2.4.30 rc3
Linux, Kernel 2.4.30 rc2
Linux, Kernel 2.4.31 pre1
Linux, Kernel 2.4.31
Linux, Kernel 2.4.32 pre1
Linux, Kernel 2.4.32
Linux, Kernel 2.4.32 pre2
Linux, Kernel 2.4.33 pre1
Linux, Kernel 2.4.33
Linux, Kernel 2.4.33.2
Linux, Kernel 2.4.33.3
Linux, Kernel 2.4.33.4
Linux, Kernel 2.4.33.5
Linux, Kernel 2.4.34
Linux, Kernel 2.4.35
Linux, Kernel 2.4.36
Linux, Kernel 2.4.36.1
Linux, Kernel 2.4.36.2
Linux, Kernel 2.4.36.3
Linux, Kernel 2.4.36.4
Linux, Kernel 2.4.36.5
Linux, Kernel 2.4.4
Linux, Kernel 2.4.5
Linux, Kernel 2.4.6
Linux, Kernel 2.4.7
Linux, Kernel 2.4.8
Linux, Kernel 2.4.9
Linux, Kernel 2.6.0 test3
Linux, Kernel 2.6.0 test7
Linux, Kernel 2.6.0 test5
Linux, Kernel 2.6.0 test6
Linux, Kernel 2.6.0
Linux, Kernel 2.6.0 test4
Linux, Kernel 2.6.0 test8
Linux, Kernel 2.6.0 test9
Linux, Kernel 2.6.0 test2
Linux, Kernel 2.6.0 test1
Linux, Kernel 2.6.0 test9-cvs
Linux, Kernel 2.6.1
Linux, Kernel 2.6.1 rc1
Linux, Kernel 2.6.1 rc2
Linux, Kernel 2.6.10
Linux, Kernel 2.6.10 rc2
Linux, Kernel 2.6.11 rc2
Linux, Kernel 2.6.11
Linux, Kernel 2.6.11 rc3
Linux, Kernel 2.6.11 rc4
Linux, Kernel 2.6.11.11
Linux, Kernel 2.6.11.12
Linux, Kernel 2.6.11.4
Linux, Kernel 2.6.11.5
Linux, Kernel 2.6.11.6
Linux, Kernel 2.6.11.7
Linux, Kernel 2.6.11.8
Linux, Kernel 2.6.12 rc1
Linux, Kernel 2.6.12 rc4
Linux, Kernel 2.6.12 rc5
Linux, Kernel 2.6.12
Linux, Kernel 2.6.12.1
Linux, Kernel 2.6.12.12
Linux, Kernel 2.6.12.2
Linux, Kernel 2.6.12.22
Linux, Kernel 2.6.12.3
Linux, Kernel 2.6.12.4
Linux, Kernel 2.6.12.5
Linux, Kernel 2.6.12.6
Linux, Kernel 2.6.13 rc1
Linux, Kernel 2.6.13 rc4
Linux, Kernel 2.6.13 rc6
Linux, Kernel 2.6.13 rc7
Linux, Kernel 2.6.13
Linux, Kernel 2.6.13.1
Linux, Kernel 2.6.13.2
Linux, Kernel 2.6.13.3
Linux, Kernel 2.6.13.4
Linux, Kernel 2.6.14 rc3
Linux, Kernel 2.6.14 rc1
Linux, Kernel 2.6.14 rc4
Linux, Kernel 2.6.14 rc2
Linux, Kernel 2.6.14
Linux, Kernel 2.6.14.1
Linux, Kernel 2.6.14.2
Linux, Kernel 2.6.14.3
Linux, Kernel 2.6.14.4
Linux, Kernel 2.6.14.5
Linux, Kernel 2.6.15
Linux, Kernel 2.6.15 rc2
Linux, Kernel 2.6.15 rc3
Linux, Kernel 2.6.15 rc1
Linux, Kernel 2.6.15.1
Linux, Kernel 2.6.15.11
Linux, Kernel 2.6.15.2
Linux, Kernel 2.6.15.3
Linux, Kernel 2.6.15.4
Linux, Kernel 2.6.15.5
Linux, Kernel 2.6.16
Linux, Kernel 2.6.16 rc1
Linux, Kernel 2.6.16.1
Linux, Kernel 2.6.16.11
Linux, Kernel 2.6.16.12
Linux, Kernel 2.6.16.13
Linux, Kernel 2.6.16.19
Linux, Kernel 2.6.16.23
Linux, Kernel 2.6.16.27
Linux, Kernel 2.6.16.7
Linux, Kernel 2.6.16.9
Linux, Kernel 2.6.17 rc5
Linux, Kernel 2.6.17
Linux, Kernel 2.6.17.1
Linux, Kernel 2.6.17.10
Linux, Kernel 2.6.17.11
Linux, Kernel 2.6.17.12
Linux, Kernel 2.6.17.13
Linux, Kernel 2.6.17.14
Linux, Kernel 2.6.17.2
Linux, Kernel 2.6.17.3
Linux, Kernel 2.6.17.5
Linux, Kernel 2.6.17.6
Linux, Kernel 2.6.17.7
Linux, Kernel 2.6.17.8
Linux, Kernel 2.6.18
Linux, Kernel 2.6.18.1
Linux, Kernel 2.6.18.3
Linux, Kernel 2.6.18.4
Linux, Kernel 2.6.18.53
Linux, Kernel 2.6.19
Linux, Kernel 2.6.19 rc2
Linux, Kernel 2.6.19 rc4
Linux, Kernel 2.6.19 rc3
Linux, Kernel 2.6.19 rc1
Linux, Kernel 2.6.19.1
Linux, Kernel 2.6.19.2
Linux, Kernel 2.6.2
Linux, Kernel 2.6.20 rc2
Linux, Kernel 2.6.20
Linux, Kernel 2.6.20.1
Linux, Kernel 2.6.20.11
Linux, Kernel 2.6.20.13
Linux, Kernel 2.6.20.15
Linux, Kernel 2.6.20.2
Linux, Kernel 2.6.20.3
Linux, Kernel 2.6.20.4
Linux, Kernel 2.6.20.5
Linux, Kernel 2.6.20.8
Linux, Kernel 2.6.20.9
Linux, Kernel 2.6.21 rc3
Linux, Kernel 2.6.21 rc4
Linux, Kernel 2.6.21
Linux, Kernel 2.6.21 rc6
Linux, Kernel 2.6.21 rc5
Linux, Kernel 2.6.21.1
Linux, Kernel 2.6.21.2
Linux, Kernel 2.6.21.6
Linux, Kernel 2.6.21.7
Linux, Kernel 2.6.22
Linux, Kernel 2.6.22 rc7
Linux, Kernel 2.6.22 rc1
Linux, Kernel 2.6.22.1
Linux, Kernel 2.6.22.11
Linux, Kernel 2.6.22.12
Linux, Kernel 2.6.22.13
Linux, Kernel 2.6.22.14
Linux, Kernel 2.6.22.15
Linux, Kernel 2.6.22.16
Linux, Kernel 2.6.22.17
Linux, Kernel 2.6.22.3
Linux, Kernel 2.6.22.4
Linux, Kernel 2.6.22.5
Linux, Kernel 2.6.22.6
Linux, Kernel 2.6.22.7
Linux, Kernel 2.6.22.8
Linux, Kernel 2.6.23 rc1
Linux, Kernel 2.6.23 rc2
Linux, Kernel 2.6.23
Linux, Kernel 2.6.23.1
Linux, Kernel 2.6.23.10
Linux, Kernel 2.6.23.14
Linux, Kernel 2.6.23.2
Linux, Kernel 2.6.23.3
Linux, Kernel 2.6.23.4
Linux, Kernel 2.6.23.5
Linux, Kernel 2.6.23.6
Linux, Kernel 2.6.23.7
Linux, Kernel 2.6.23.9
Linux, Kernel 2.6.24 rc1
Linux, Kernel 2.6.24 rc2
Linux, Kernel 2.6.24 rc3
Linux, Kernel 2.6.24.1
Linux, Kernel 2.6.24.2
Linux, Kernel 2.6.24.6
Linux, Kernel 2.6.25
Linux, Kernel 2.6.25.1
Linux, Kernel 2.6.25.2
Linux, Kernel 2.6.25.3
Linux, Kernel 2.6.25.4
MandrakeSoft, Mandrake Linux 2008.1 X86_64
MandrakeSoft, Mandrake Linux 2008.1
MandrakeSoft, Mandrake Linux Corporate Server 4.0
MandrakeSoft, Mandrake Linux Corporate Server 4.0 X86_64
Novell, Linux Desktop 9
Novell, Linux POS 9
Novell, Open Enterprise Server
Novell, OpenSUSE 11.0
Novell, SLE SDK 10 SP2
Novell, SLE SDK 10 SP1
Novell, SUSE Linux Enterprise 10 SP1 DEBUGINFO
Novell, SUSE Linux Enterprise 10 SP2 DEBUGINFO
Novell, SUSE Linux Enterprise Desktop 10 SP2
Novell, SUSE Linux Enterprise Desktop 10 SP1
Novell, SUSE Linux Enterprise Server 10 SP1
Novell, SUSE Linux Enterprise Server 10 SP2
SuSE, SuSE Linux Enterprise Server 9.0
SuSE, SuSE SLES 9

Remedy:

Refer to The Linux Kernel Archives Web site for patch, upgrade or suggested workaround information. See References.

Consequences:

Gain Access

References:

The Linux Kernel Archives Web site, patch-2.6.26-rc5-git1.log at http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.26-rc5-git1.log.
The Linux Kernel Archives Web site, The Linux Kernel Archives at http://kernel.org/.
The Linux Kernel Archives Web site, ChangeLog-2.4.36.6 at http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6.
The Linux Kernel Archives Web site, ChangeLog-2.6.25.5 at http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5.
BID-29589: Linux Kernel BER Decoding Remote Buffer Overflow Vulnerability
CVE-2008-1673: The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
DSA-1592: linux-2.6 -- heap overflow
FrSIRT/ADV-2008-1770: Linux Kernel ASN.1 BER Decoding Remote Buffer Overflow Vulnerability
MDVSA-2008:113: Updated kernel packages fix security issue
MDVSA-2008:174: kernel
SA30000: Debian update for linux-2.6
SA30580: Linux Kernel ASN.1 BER Decoding Vulnerability
SECTRACK ID: 1020210: Linux Kernel Heap Overflow in Decoding ASN.1 BER Data May Let Remote Users Execute Arbitrary Code
SUSE-SA:2008:035: Linux kernel update
SUSE-SA:2008:038: Linux kernel security update
SUSE-SA:2008:044: Linux kernel security update
SUSE-SA:2008:047: Linux kernel security update for SLES 9
SUSE-SA:2008:048: SUSE Linux Enterprise 10 SP2 kernel update
SUSE-SA:2008:049: SUSE Security Announcement
SUSE-SR:2008:025: SUSE Security Summary Report
USN-625-1: Linux kernel vulnerabilities

Reported:

Jun 06, 2008

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page