Bug 919164 (CVE-2013-1827)

Summary:	CVE-2013-1827 Kernel: dccp: check ccid before NULL poiter dereference
Product:	[Other] Security Response	Reporter:	Prasad Pandit <ppandit>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	agordeev, anton, bhu, davej, dhoward, esammons, fhrbata, gansalmon, iboverma, itamar, jforbes, jkacur, jonathan, jwboyer, kernel-maint, kernel-mgr, lgoncalv, lwang, madhu.chinakonda, mcressma, npajkovs, plougher, pmatouse, rt-maint, rvrbovsk, sforsber, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-23 21:15:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	919184, 919186, 919187, 919188
Bug Blocks:	919027

Description Prasad Pandit 2013-03-07 18:28:33 UTC

Linux kernels built with Datagram Congestion Control Protocol(DCCP),
are vulnerable to a NULL pointer dereference flaw. This occurs while accessing socket options of dccp_sock objects via ccid_hc_rx_getsockopt & ccid_hc_tx_getsockopt routines.

A user/program could use this flaw to crash the kernel, resulting in DoS.

Upstream fix:
-------------
 -> https://git.kernel.org/linus/276bdb82dedb290511467a5a4fdbe9f0b52dce6f

Reference:
----------
 -> http://seclists.org/oss-sec/2013/q1/598

Comment 1 Prasad Pandit 2013-03-07 19:33:40 UTC

Statement:

This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.

Comment 3 errata-xmlrpc 2013-04-23 18:29:00 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2013:0744 https://rhn.redhat.com/errata/RHSA-2013-0744.html