Related information

Linux kernel drivers buffer overflows

From:	SECUNIA <support_(at)_secunia.com>
Date:	02.11.2005
Subject:	[SA17384] Linux Kernel Potential Buffer Overflow Vulnerabilities

TITLE:
Linux Kernel Potential Buffer Overflow Vulnerabilities

SECUNIA ADVISORY ID:
SA17384

VERIFY ADVISORY:
http://secunia.com/advisories/17384/

CRITICAL:
Not critical

IMPACT:
Unknown

WHERE:
Local system

OPERATING SYSTEM:
Linux Kernel 2.6.x
http://secunia.com/product/2719/

DESCRIPTION:
Two vulnerabilities have been reported in the Linux Kernel, with an
unknown impact.

1) A boundary error due to missing parameter validation in the
"map_to_seg7()" function in "drivers/usb/input/map_to_7segment.h" of
the Yealink driver may cause out-of-bound memory references.

2) A boundary error in "/drivers/i2c/i2c-core.c" when handling SMBus
Block Write transactions may cause a buffer overflow.

SOLUTION:
The vulnerabilities have been fixed in version 2.6.14-git4.

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
Kernel.org:
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a
f64a5ebb817532965d18b792d6d74afecfb0bcf
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5
c50d1885981537ff3b8df6433951de6c9cb72cb
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.14-git4.log

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.