Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 취약점
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There are actually 2 problems: - deleting the last element doesn't require the memmove of elements [i + 1, end) over it. Actually, element i+1 is out of bounds. - The memmove itself should move size - i - 1 elements, because the last element is out of bounds. The out-of-bounds element still remains out of bounds after being accessed, so the problem is only that we touch it, not that it becomes in active use. But I suppose it can lead to issue...
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There are actually 2 problems: - deleting the last element doesn't require the memmove of elements [i + 1, end) over it. Actually, element i+1 is out of bounds. - The memmove itself should move size - i - 1 elements, because the last element is out of bounds. The out-of-bounds element still remains out of bounds after being accessed, so the problem is only that we touch it, not that it becomes in active use. But I suppose it can lead to issue...
영향 제품·버전
제품 Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP의 현재 전체 버전이 공식 영향 범위(Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < f85b9bfb08ba2b642d1810c6c4ae1e7b46f1776a, >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < f117d0467215d7f1d445ae16d2c799637e63dc6c, >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < b52153da1f42e2f4d6259257a7ba027331671a93, >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < 4584486cfcca24b7b586da3377eb3cffd48669ec, >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < 031e00249e9e6bee72ba66701c8f83b45fc4b8a2, >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < 59b97641de03c081f26b3a8876628c765b5faa25, >= 6666cebc5e306f49a25bd20aa8c1cb8ef8950df5 < 5f2b28b79d2d1946ee36ad8b3dc0066f73c90481, >= 5.2, >= V3.1.6, >= 5.2 < 6.14.2)에 포함되는지 확인합니다. OS를 선택하면 해당 OS의 제품·패키지·KB·APAR 확인 명령만 표시됩니다.
조치방안
제3자 참조와 수정 버전 값(6.14.2)은 보조 근거로만 사용하고, 공급사 공식 보안 권고에서 조치 기준을 재확인합니다.
조치 후 확인사항
패치 후 같은 명령으로 전체 버전을 다시 확인해 Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 6.14.2 기준을 충족하는지 확인합니다. 이어서 메모리 손상 관련 오류·공격 흔적이 새로 발생하지 않는지 확인합니다.
