NS-SA-2021-0104

简介

important: kernel/ipa security update

严重级别

important

主题

An update for kernel/ipa is now available for NewStart CGSL MAIN 5.04/CGSL CORE 5.04.
NewStart Security has rated this update as having a security impact of important. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

详细描述

kernel: The python-perf package contains a module that permits applications written in the Python programming language to use the interface to manipulate perf events.
ipa: Cross-realm trusts with Active Directory in IPA require working Samba 4 installation. This package is provided for convenience to install all required dependencies at once.


Security Fix(es):
kernel: An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address.(CVE-2019-19532)
kernel: A flaw was found in the Linux pinctrl system. It is possible to trigger an of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed.(CVE-2020-0427)
kernel: A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2020-14351)
kernel: A flaw was found in the Linux kernel. A local attacker, able to inject conntrack netlink configuration, could overflow a local buffer causing crashes or triggering the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2020-25211)
kernel: A flaw was found in the Linux kernel. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.(CVE-2020-25645)
kernel: A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.(CVE-2020-25705)
kernel: A locking vulnerability was found in the tty subsystem of the Linux kernel in drivers/tty/tty_jobctrl.c. This flaw allows a local attacker to possibly corrupt memory or escalate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-29661)
kernel: A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.(CVE-2021-20265)
kernel: bugfix
ipa: A flaw was found in jQuery. HTML containing elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.(CVE-2020-11023)
ipa: bugfix


Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 5.04.F32B3.

影响组件

• kernel
• ipa

影响产品

• CGSL MAIN 5.04
• CGSL CORE 5.04

更新包

CVE

• CVE-2019-19532
• CVE-2020-0427
• CVE-2020-14351
• CVE-2020-25211
• CVE-2020-25645
• CVE-2020-25705
• CVE-2020-29661
• CVE-2021-20265
• CVE-2020-11023

参考

• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-19532
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-0427
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14351
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-25211
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-25645
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-25705
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-29661
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-20265
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11023