Linux kernel 32-bit and 64-bit emulation memory disclosure
| linux-kernel-emulation-disclosure (43554) |  Low Risk |
Description:
An unspecified vulnerability related to 32-bit and 64-bit emulation in the Linux kernel could allow a local attacker to obtain sensitive information. An attacker could exploit this vulnerability using a malicious binary to read portions of uninitialized memory.
Platforms Affected:
- Canonical, Ubuntu 6.06 LTS
- Canonical, Ubuntu 7.04
- Canonical, Ubuntu 7.10
- Canonical, Ubuntu 8.04 LTS
- Debian, Debian Linux 4.0
- Linux, Kernel 2.6.18
- Linux, Kernel 2.6.9
- MandrakeSoft, Mandrake Linux Corporate Server 4.0 X86_64
- MandrakeSoft, Mandrake Linux Corporate Server 4.0
- Novell, Linux Desktop 9
- Novell, Linux POS 9
- Novell, Open Enterprise Server
- Novell, SLE SDK 10 SP1
- Novell, SLE SDK 10 SP2
- Novell, SUSE Linux Enterprise 10 SP2 DEBUGINFO
- Novell, SUSE Linux Enterprise 10 SP1 DEBUGINFO
- Novell, SUSE Linux Enterprise Desktop 10 SP1
- Novell, SUSE Linux Enterprise Desktop 10 SP2
- Novell, SUSE Linux Enterprise Server 10 SP2
- Novell, SUSE Linux Enterprise Server 10 SP1
- RedHat, Enterprise Linux 3 Desktop
- RedHat, Enterprise Linux 3 AS
- RedHat, Enterprise Linux 3 WS
- RedHat, Enterprise Linux 3 ES
- RedHat, Enterprise Linux 4 WS
- RedHat, Enterprise Linux 4 Desktop
- RedHat, Enterprise Linux 4 AS
- RedHat, Enterprise Linux 4 ES
- RedHat, Enterprise Linux 5
- RedHat, Enterprise Linux 5 Client
- SuSE, Linux Enterprise Server 9
- SuSE, SuSE SLES 9
Remedy:
Upgrade to the latest version of the Linux kernel (2.6.25.10 or later), available from The Linux Kernel Archives Web site. See References.
For other distributions:
Apply the appropriate update for your system. See References.
Consequences:
Obtain Information
References:
- Red Hat Bugzilla Bug 433938, CVE-2008-0598 kernel: linux x86_64 ia32 emulation leaks uninitialized data at https://bugzilla.redhat.com/show_bug.cgi?id=433938.
- The Linux Kernel Archives Web site, The Linux Kernel Archives at http://www.kernel.org/.
- ASA-2008-287: kernel security and bug fix update (RHSA-2008-0508)
- BID-29936: Mambo Articles Component 'artid' Parameter SQL Injection Vulnerability
- BID-29942: Linux Kernel 32-bit/64bit Emulation Local Information Disclosure Vulnerability
- CVE-2008-0598: Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.
- DSA-1630: linux-2.6 -- denial of service/information leak
- MDVSA-2008:220: kernel
- MDVSA-2008:220-1: kernel
- RHSA-2008-0508: Important: kernel security and bug fix update
- RHSA-2008-0519: Important: kernel security and bug fix update
- RHSA-2008-0973: Important: kernel security and bug fix update
- RHSA-2009-0009: Important: kernel security and bug fix update
- SECTRACK ID: 1020367: Linux Kernel copy_user() IA32 Emulation Bug Discloses Information to Local Users
- SUSE-SA:2008:047: Linux kernel security update for SLES 9
- SUSE-SA:2008:048: SUSE Linux Enterprise 10 SP2 kernel update
- SUSE-SA:2008:049: SUSE Security Announcement
- USN-625-1: Linux kernel vulnerabilities
- USN-637-1: Linux kernel vulnerabilities
Reported:
Jun 25, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net