Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2019.0726
Security Bulletin: IBM Security Guardium is affected by Red
Hat kernel vulnerabilities
7 March 2019
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: IBM Security Guardium
Publisher: IBM
Operating System: Linux variants
Impact/Access: Root Compromise -- Existing Account
Access Privileged Data -- Existing Account
Denial of Service -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2018-1000004 CVE-2018-14634 CVE-2018-10901
CVE-2018-7566 CVE-2018-5391 CVE-2018-3693
CVE-2018-3646 CVE-2018-3639 CVE-2018-3620
CVE-2017-15265 CVE-2017-0861
Reference: ASB-2018.0222.3
ESB-2019.0623
ESB-2019.0545
ESB-2019.0474
Original Bulletin:
http://www.ibm.com/support/docview.wss?uid=ibm10872470
- --------------------------BEGIN INCLUDED TEXT--------------------
Security Bulletin: IBM Security Guardium is affected by Red Hat kernel
vulnerabilities
Document information
More support for: IBM Security Guardium
Component: --
Software version: 10.0-10.6
Operating system(s): Linux
Reference #: 0872470
Modified date: 06 March 2019
Summary
IBM Security Guardium has addressed the following vulnerabilities.
Vulnerability Details
CVEID: CVE-2018-3639
DESCRIPTION: Multiple Intel CPU''s could allow a local attacker to obtain
sensitive information, caused by utilizing sequences of speculative execution
and speculative execution of memory reads before the addresses of all prior
memory writes are known. By conducting targeted cache side-channel attacks, an
attacker could exploit this vulnerability to bypass security restrictions and
gain read access to privileged memory. Note: This vulnerability is the
Speculative Store Bypass (SSB), also known as Variant 4 or "SpectreNG".
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
143569 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)
CVEID: CVE-2018-1000004
DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a
race condition in the sound system. A remote attacker could exploit this
vulnerability to cause the system to crash.
CVSS Base Score: 5.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
137756 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2018-10901
DESCRIPTION: Linux Kernel could allow a remote attacker to gain elevated
privileges on the system, caused by the failure to restore the GDT.LIMIT to
the previous host value by the KVM virtualization subsystem. By sending a
specially-crafted argument, an attacker could exploit this vulnerability to
gain elevated privileges.
CVSS Base Score: 9.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
147862 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2018-7566
DESCRIPTION: Linux Kernel is vulnerable to a buffer overflow, caused by
improper bounds checking by user-supplied input. By using an
SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq, a local
authenticated attacker could overflow a buffer and execute arbitrary code on
the system.
CVSS Base Score: 7.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
141112 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2018-3693
DESCRIPTION: Intel Haswell Xeon, AMD PRO and ARM Cortex A57 CPUs could allow a
local authenticated attacker to obtain sensitive information, caused by a
bounds check bypass in the CPU speculative branch instruction execution
feature. By conducting targeted cache side-channel attacks, an attacker could
exploit this vulnerability to cross the syscall boundary and read data from
the CPU virtual memory.
CVSS Base Score: 7.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
146191 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
CVEID: CVE-2018-3646
DESCRIPTION: Multiple Intel CPU''s could allow a local attacker to obtain
sensitive information, caused by a flaw in the CPU speculative branch
instruction execution feature. By conducting targeted cache side-channel
attacks and via a terminal page fault, an attacker with guest OS privilege
could exploit this vulnerability to leak information residing in the L1 data
cache and read data belonging to different security contexts.
CVSS Base Score: 7.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
148319 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
CVEID: CVE-2018-3620
DESCRIPTION: Multiple Intel CPU''s could allow a local attacker to obtain
sensitive information, caused by a flaw in the CPU speculative branch
instruction execution feature. By conducting targeted cache side-channel
attacks and via a terminal page fault, an attacker could exploit this
vulnerability to leak information residing in the L1 data cache and read data
belonging to different security contexts. Note: This vulnerability is also
known as the "L1 Terminal Fault (L1TF)" or "Foreshadow" attack.
CVSS Base Score: 7.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
148318 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
CVEID: CVE-2017-15265
DESCRIPTION: Linux Kernel could allow a local attacker to gain elevated
privileges on the system, caused by a use-after-free memory error in the ALSA
sequencer interface (/dev/snd/seq). By persuading a victim to open a
specially-crafted application, an attacker could exploit this vulnerability to
execute arbitrary code on the system with elevated privileges.
CVSS Base Score: 7.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
133342 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVEID: CVE-2017-0861
DESCRIPTION: Google Android could allow a remote attacker to gain elevated
privileges on the system, caused by a flaw in the Upstream kernel audio
driver. By persuading a victim to open a specially-crafted application, an
attacker could exploit this vulnerability to gain elevated privileges on the
system.
CVSS Base Score: 7.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
135049 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVEID: CVE-2018-14634
DESCRIPTION: Linux Kernel could allow a local authenticated attacker to gain
elevated privileges on the system, caused by an integer overflow in the
create_elf_tables function. By using a specially-crafted binary file, an
attacker could exploit this vulnerability to obtain full root privileges.
CVSS Base Score: 7.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
150310 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2018-5391
DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by the
improper handling of the reassembly of fragmented IPv4 and IPv6 packets by the
IP implementation. By sending specially crafted IP fragments with random
offsets, a remote attacker could exploit this vulnerability to exhaust all
available CPU resources and cause a denial of service.
CVSS Base Score: 7.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/
148388 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected Products and Versions
+--------------------------------------------+-----------------+
| Affected IBM Security Guardium |Affected Versions|
+--------------------------------------------+-----------------+
|IBM Security Guardium |10.0 - 10.6 |
+--------------------------------------------+-----------------+
Remediation/Fixes
+---------------------+---------------+----------------------------------------------------------+
| Product | VRMF | Remediation / First Fix |
+---------------------+---------------+----------------------------------------------------------+
| | |http://www.ibm.com/support/fixcentral/swg/quickorder |
| | |parent=IBM%20Security&product=ibm/Information+Management/ |
|IBM Security Guardium|10.0 - 10.6 |InfoSphere+Guardium&release=10.0&platform=All&function= |
| | |fixId&fixids= |
| | |SqlGuard_10.0p610_Combined-Fix-Pack-for-GPU-600_2019-02-27|
| | |&includeSupersedes=0&source=fc |
+---------------------+---------------+----------------------------------------------------------+
Workarounds and Mitigations
None
Change History
March 9, 2019: Original Version Published
*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the impact of
this vulnerability in their environments by accessing the links in the
Reference section of this Security Bulletin.
Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST), the
Common Vulnerability Scoring System (CVSS) is an "industry open standard
designed to convey vulnerability severity and help to determine urgency and
priority of response." IBM PROVIDES THE CVSS SCORES ""AS IS"" WITHOUT WARRANTY
OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT
OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=Z/Nw
-----END PGP SIGNATURE-----