Multiple buffer overflows in the cifs subsystem in the Linux...

Vulnerability Description

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.

References

• http://www.debian.org/security/2009/dsa-1865
• http://wiki.rpath.com/Advisories:rPSA-2009-0111
• http://secunia.com/advisories/35226
• http://www.openwall.com/lists/oss-security/2009/05/14/1
• http://secunia.com/advisories/37471
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:148
• http://secunia.com/advisories/35656
• http://www.debian.org/security/2009/dsa-1844
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html
• http://www.openwall.com/lists/oss-security/2009/05/15/2
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525
• http://secunia.com/advisories/37351
• http://marc.info/?l=oss-security&m=124099284225229&w=2
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
• http://www.redhat.com/support/errata/RHSA-2009-1157.html
• http://www.securityfocus.com/bid/34612
• http://www.securityfocus.com/archive/1/505254/100/0/threaded
• http://www.securityfocus.com/archive/1/507985/100/0/threaded
• http://secunia.com/advisories/36051
• http://secunia.com/advisories/35298
• http://secunia.com/advisories/36327
• http://www.ubuntu.com/usn/usn-793-1
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4
• http://marc.info/?l=oss-security&m=124099371726547&w=2
• http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61
• http://secunia.com/advisories/35217
• https://bugzilla.redhat.com/show_bug.cgi?id=496572
• http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
• http://www.vupen.com/english/advisories/2009/3316
• http://www.debian.org/security/2009/dsa-1809
• http://secunia.com/advisories/35847
• http://www.openwall.com/lists/oss-security/2009/05/14/4