Secunia

Two vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious people to potentially compromise a user's system.

1) A boundary error in the processing of tag 11 packets can be exploited to cause a stack-based buffer overflow via an eCryptfs file containing a specially crafted metadata section.

2) A boundary error in the "parse_tag_3_packet()" eCryptfs function can be exploited to cause a heap-based buffer overflow via a tag 3 packet containing an overly large encrypted key size.

Successful exploitation may allow execution of arbitrary code, but requires that a user is tricked into processing a specially crafted eCryptfs file.

The vulnerabilities are reported in version 2.6.30.3. Other versions may also be affected.

Solution
Update to version 2.6.30.4.

Provided and/or discovered by
Ramon de Carvalho Valle

Changelog
Further details available in Customer Area

Original Advisory
Kernel.org:
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4

Linux Kernel GIT:
http://git.kernel.org/linus/6352a29305373ae6196491e6d4669f301e26492e
http://git.kernel.org/linus/f151cd2c54ddc7714e2f740681350476cda03a28

Ramon de Carvalho Valle:
http://risesecurity.org/advisories/RISE-2009002.txt
http://risesecurity.org/advisories/RISE-2009003.txt

Deep Links
Links available in Customer Area