Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 10.04 LTS USN-1684-1 Critical Info Leak in linux-ec2 Kernel

ubuntu
Calendar Grey January 10, 2013
Scroller Ubuntu
Improve your Ubuntu 10.04 LTS security by applying a crucial kernel update for EC2, ensuring sensitive data remains protected with these steps
The system could be made to leak sensitive system information.

Summary

The system could be made to leak sensitive system information.

Software Description:

- linux-ec2: Linux kernel for EC2

Details:

A flaw was discovered in the Linux kernel's handling of script execution

when module loading is enabled. A local attacker could exploit this flaw to

cause a leak of kernel stack contents.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.32-350-ec2      2.6.32-350.59

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1684-1

CVE-2012-4530

Severity
critical
Lowest
Low
Medium
High
Critical

January 10, 2013

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.