Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Ubuntu 10.04 LTS USN-1294-1 Moderate Denial of Service Risks

ubuntu
Calendar Grey December 8, 2011
Scroller Ubuntu
Various core vulnerabilities addressed in Ubuntu Security Notice USN-1294-1, resolving potential service disruptions and exposure of sensitive data.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux-lts-backport-oneiric: Linux kernel backport from Oneiric

Details:

Peter Huewe discovered an information leak in the handling of reading

security-related TPM data. A local, unprivileged user could read the

results of a previous TPM command. (CVE-2011-1162)

Vasiliy Kulikov discovered that taskstats did not enforce access

restrictions. A local attacker could exploit this to read certain

information, leading to a loss of privacy. (CVE-2011-2494)

Qianfeng Zhang discovered that the bridge networking interface incorrectly

handled certain network packets. A remote attacker could exploit this to

crash the system, leading to a denial of service. (CVE-2011-2942)

Yasuaki Ishimatsu discovered a flaw in the kernel's clock implementation. A

local unprivileged attacker could exploit this causing a denial of service.

(CVE-2011-3209)

Zheng Liu discovered a flaw in how the ext4 filesystem sp...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service information leak kernel ubuntu access restrictions linux-lts-backport

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-3.0.0-13-generic    3.0.0-13.22~lucid1
  linux-image-3.0.0-13-generic-pae  3.0.0-13.22~lucid1
  linux-image-3.0.0-13-server     3.0.0-13.22~lucid1
  linux-image-3.0.0-13-virtual    3.0.0-13.22~lucid1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1294-1

CVE-2011-1162, CVE-2011-2494, CVE-2011-2942, CVE-2011-3209,

CVE-2011-3638, CVE-2011-4081, CVE-2011-4087, CVE-2011-4326

Severity
important
Lowest
Low
Medium
High
Critical

December 08, 2011

Topics%20covered

Topics Covered

security advisory denial of service information leak kernel ubuntu access restrictions linux-lts-backport

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-backport-oneiric/3.0.0-13.22~lucid1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.