Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Ubuntu 10.10: USN-1379-1 Critical: Kernel DoS and Flaws

ubuntu
Calendar Grey February 28, 2012
Scroller Ubuntu
Multiple vulnerabilities patched in Ubuntu's kernel, impacting overall system performance and necessitating immediate updates.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's

handling of IPv4 icmp packets. A remote user could exploit this to cause a

denial of service. (CVE-2011-1927)

A flaw was found in the Linux Ethernet bridge's handling of IGMP (Internet

Group Management Protocol) packets. An unprivileged local user could

exploit this flaw to crash the system. (CVE-2011-0716)

A flaw was discovered in the Linux kernel's AppArmor security interface

when invalid information was written to it. An unprivileged local user

could use this to cause a denial of service on the system. (CVE-2011-3619)

Topics%20covered

Topics Covered

security advisory critical issue DoS kernel system update ubuntu software flaw

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.10:
  linux-image-2.6.35-32-generic   2.6.35-32.66
  linux-image-2.6.35-32-generic-pae  2.6.35-32.66
  linux-image-2.6.35-32-omap      2.6.35-32.66
  linux-image-2.6.35-32-powerpc   2.6.35-32.66
  linux-image-2.6.35-32-powerpc-smp  2.6.35-32.66
  linux-image-2.6.35-32-powerpc64-smp  2.6.35-32.66
  linux-image-2.6.35-32-server    2.6.35-32.66
  linux-image-2.6.35-32-versatile  2.6.35-32.66
  linux-image-2.6.35-32-virtual   2.6.35-32.66

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1379-1

CVE-2011-0716, CVE-2011-1927, CVE-2011-3619

Severity
critical
Lowest
Low
Medium
High
Critical

February 28, 2012

Topics%20covered

Topics Covered

security advisory critical issue DoS kernel system update ubuntu software flaw

Package Information

https://launchpad.net/ubuntu/+source/linux/2.6.35-32.66

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.