logo
DATABASE RESOURCES PRICING ABOUT US

Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities

Description

## Summary IBM QRadar Network Security has addressed the following vulnerabilities. ## Vulnerability Details **CVEID: **[CVE-2018-1000004](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000004>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by a race condition in the sound system. A remote attacker could exploit this vulnerability to cause the system to crash. CVSS Base Score: 5.3 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/137756> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID: **[CVE-2018-6927](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6927>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by an integer overflow in the futex_requeue function in kernel/futex.c. By triggering a negative wake or requeue value, a remote attacker could exploit this vulnerability to cause a denial of service condition. CVSS Base Score: 7.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/139067> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2018-5750](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5750>) **DESCRIPTION: **Linux Kernel could allow a local attacker to obtain sensitive information, caused by a flaw in the acpi_smbus_hc_add function in drivers/acpi/sbshc.c. By reading dmesg data from an SBS HC printk call, an attacker could exploit this vulnerability to obtain sensitive information. CVSS Base Score: 4 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/138417> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) **CVEID: **[CVE-2017-1000410](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000410>) **DESCRIPTION: **Linux Kernel could allow a remote attacker to obtain sensitive information, caused by a flaw when processing the incoming of L2CAP commands, ConfigRequest and ConfigResponse messages. By manipulating the code flows that precede the handling of the configuration messages, a remote attacker could exploit this vulnerability to obtain sensitive information. CVSS Base Score: 7.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136155> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) **CVEID: **[CVE-2017-1000407](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000407>) **DESCRIPTION: **Linux Kernel, built with the KVM virtualization(CONFIG_KVM) support, is vulnerable to a denial of service, caused by improper validation of user-supplied input at the diagnostic port. By flooding the diagnostic port 0x80, a remote authenticated attacker could exploit this vulnerability to cause the system to crash. CVSS Base Score: 6.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136235> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2017-1000252](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000252>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by an assertion failure in the KVM subsystem in arch/x86/kvm/vmx.c and virt/kvm/eventfd.c. By using a specially-crafted guest_irq value, a local authenticated attacker could exploit this vulnerability to cause the hypervisor hang or crash. CVSS Base Score: 5.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/132620> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2017-18203](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18203>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by a flaw in the dm_get_from_kobject function in drivers/md/dm.c. By leveraging a race condition with __dm_destroy during creation and removal of DM devices, a local attacker could exploit this vulnerability to cause a denial of service. CVSS Base Score: 4 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/139759> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID: **[CVE-2017-18017](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18017>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in the tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c. By leveraging the presence of xt_TCPMSS in an iptables action, a remote attacker could exploit this vulnerability to cause a denial of service condition. CVSS Base Score: 7.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/137122> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2017-17558](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17558>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds write in the usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem. By using a specially-crafted USB device, a local attacker could exploit this vulnerability to cause a denial of service condition. CVSS Base Score: 6.2 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136403> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2017-17449](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17449>) **DESCRIPTION: **Linux Kernel could allow a local attacker to obtain sensitive information, caused by the failure to restrict observations of Netlink messages to a single net namespace when CONFIG_NLMON is enabled in the __netlink_deliver_tap_skb function in net/netlink/af_netlink.c. By leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system, an attacker could exploit this vulnerability to obtain sensitive information. CVSS Base Score: 6.2 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136106> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) **CVEID: **[CVE-2017-15126](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15126>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in fs/userfaultfd.c. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause fork event to be removed from an already freed list. CVSS Base Score: 5.3 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/137626> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID: **[CVE-2017-15121](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15121>) **DESCRIPTION: **Red Hat Enterprise Linux is vulnerable to a denial of service, caused by a flaw in the truncate_inode_pages_range(). A local authenticated attacker could exploit this vulnerability to cause the system to crash or mount a fuse filesystem. CVSS Base Score: 5.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136213> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2017-15116](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15116>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by NULL pointer dereference in the rngapi_reset function in crypto/rng.c. By sending a specially-crafted packet, a remote attacker could exploit this vulnerability to cause a denial of service condition. CVSS Base Score: 5.3 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/135735> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID: **[CVE-2017-14140](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14140>) **DESCRIPTION: **Linux Kernel could allow a local authenticated attacker to obtain sensitive information, caused by improper validation of effective uid of the target process in the move_pages system call in mm/migrate.c. By sending a specially-crafted request, a local attacker could exploit this vulnerability to learn the memory layout of a setuid executable despite ASLR. CVSS Base Score: 5.5 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/131413> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) **CVEID: **[CVE-2016-3672](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3672>) **DESCRIPTION: **Linux Kernel could allow a local attacker to bypass security restrictions, caused by an error in the Linux ASLR implementation. By setting the RLIMIT_STACK resource to unlimited, an attacker could exploit this vulnerability to disable the ASLR. CVSS Base Score: 4 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/112055> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) **CVEID: **[CVE-2017-13166](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13166>) **DESCRIPTION: **Google Android could allow a remote attacker to gain elevated privileges on the system, caused by a flaw in kernel v4l2 video driver. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to gain elevated privileges. CVSS Base Score: 7.8 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136060> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2017-12190](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12190>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by an out-of-memory condition in the bio_map_user_iov and bio_unmap_user functions in block/bio.c. A local attacker could exploit this vulnerability to cause the system to crash. CVSS Base Score: 4 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/135759> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID: **[CVE-2017-12154](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12154>) **DESCRIPTION: **Linux Kernel could allow a local authenticated attacker to bypass security restrictions, caused by a flaw in the prepare_vmcs02 function in arch/x86/kvm/vmx.c. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain read and write access to the hardware CR8 register. CVSS Base Score: 7.1 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/132621> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) **CVEID: **[CVE-2017-9725](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9725>) **DESCRIPTION: **Google Android could allow a remote attacker to bypass security restrictions, caused by the wrong data type of size issue in Qualcomm Memory subsystem. By sending a specially-crafted request, an attacker could exploit this vulnerability to allow DMA allocation to succeed. CVSS Base Score: 9.8 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/132422> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2017-8824](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8824>) **DESCRIPTION: **Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by a use-after-free in the dccp_disconnect function in net/dccp/proto.c. By using a specially-crafted system call, an attacker could exploit this vulnerability to gain privileges or cause a denial of service. CVSS Base Score: 5.9 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/135913> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) **CVEID: **[CVE-2017-7294](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7294>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds write in the vmw_surface_define_ioctl function. A local attacker could exploit this vulnerability using a specially crafted ioctl call for a /dev/dri/renderD* device to cause the system to hang or crash. CVSS Base Score: 6.2 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/127410> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2016-8633](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8633>) **DESCRIPTION: **Linux Kernel could allow a remote attacker to execute arbitrary code on the system, caused by an error in drivers/firewire/net.c. By sending specially-crafted fragmented packets. An attacker could exploit this vulnerability to execute arbitrary code on the system. CVSS Base Score: 7.3 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/119632> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) **CVEID: **[CVE-2016-7913](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7913>) **DESCRIPTION: **Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by an error in the xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c. An attacker could exploit this vulnerability using attack vectors involving omission of the firmware name to gain privileges or cause a denial of service. CVSS Base Score: 7.8 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/120052> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2017-17448](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17448>) **DESCRIPTION: **Linux Kernel could allow a local attacker to bypass security restrictions, caused by the failure to require the CAP_NET_ADMIN capability for new, get, and del operations in net/netfilter/nfnetlink_cthelper.c. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass intended access restrictions. CVSS Base Score: 6.2 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/136105> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) **CVEID: **[CVE-2017-15265](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15265>) **DESCRIPTION: **Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by a use-after-free memory error in the ALSA sequencer interface (/dev/snd/seq). By persuading a victim to open a specially-crafted application, an attacker could exploit this vulnerability to execute arbitrary code on the system with elevated privileges. CVSS Base Score: 7.8 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/133342> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2017-15129](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15129>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by a use-after-free in the get_net_ns_by_id function in net/core/net_namespace.c. By sending a specially-crafted request, a local attacker could exploit this vulnerability to cause the system to crash. CVSS Base Score: 6.2 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/137388> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2017-15127](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15127>) **DESCRIPTION: **Linux Kernel is vulnerable to a denial of service, caused by a flaw in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c. By sending a specially-crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition. CVSS Base Score: 4 CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/137627> for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) ## Affected Products and Versions Affected Products | Affected Versions ---|--- IBM QRadar Network Security | 5.4.0 ## Remediation/Fixes _Product_ | _VRMF_ | _Remediation/First Fix_ ---|---|--- IBM QRadar Network Security | Firmware version 5.4.0 | Install Firmware 5.4.0.5 from the Available Updates page of the Local Management Interface, or by performing a One Time Scheduled Installation from SiteProtector. Or Download Firmware 5.4.0.5 from [IBM Security License Key and Download Center](<https://ibmss.flexnetoperations.com/control/isdl/home>) and upload and install via the Available Updates page of the Local Management Interface. ## Workarounds and Mitigations None ## Get Notified about Future Security Bulletins Subscribe to [My Notifications](< http://www-01.ibm.com/software/support/einfo.html>) to be notified of important product support alerts like this. ### References [Complete CVSS v3 Guide](<http://www.first.org/cvss/user-guide> "Link resides outside of ibm.com" ) [On-line Calculator v3](<http://www.first.org/cvss/calculator/3.0> "Link resides outside of ibm.com" ) Off ## Related Information [IBM Secure Engineering Web Portal](<http://www.ibm.com/security/secure-engineering/bulletins.html>) [IBM Product Security Incident Response Blog](<http://www.ibm.com/blogs/psirt>) ## Change History 25 July 2018: Original Version Published *The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin. ## Disclaimer According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES ""AS IS"" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY. In addition to other efforts to address potential vulnerabilities, IBM periodically updates the record of components contained in our product offerings. As part of that effort, if IBM identifies previously unidentified packages in a product/service inventory, we address relevant vulnerabilities regardless of CVE date. Inclusion of an older CVEID does not demonstrate that the referenced product has been used by IBM since that date, nor that IBM was aware of a vulnerability as of that date. We are making clients aware of relevant vulnerabilities as we become aware of them. "Affected Products and Versions" referenced in IBM Security Bulletins are intended to be only products and versions that are supported by IBM and have not passed their end-of-support or warranty date. Thus, failure to reference unsupported or extended-support products and versions in this Security Bulletin does not constitute a determination by IBM that they are unaffected by the vulnerability. Reference to one or more unsupported versions in this Security Bulletin shall not create an obligation for IBM to provide fixes for any unsupported or extended-support products or versions. ## Internal Use Only Advisory ID: 12141 Product Record ID: 118049 [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Component":"","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.4.0","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]


Affected Software


CPE Name Name Version
IBM QRadar Network Security 5.4.0

Related