Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 11.10 USN-1787-1 Critical Kernel Issues: ASLR Bypass and DoS

ubuntu
Calendar Grey April 2, 2013
Scroller Ubuntu
The recent Ubuntu Security Notification USN-1788-2 highlights significant vulnerabilities affecting the kernel and urges users to apply vital updates to enhance system defenses.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Emese Revfy discovered that in the Linux kernel signal handlers could leak

address information across an exec, making it possible to bypass ASLR

(Address Space Layout Randomization). A local user could use this flaw to

by pass ASLR to reliably deliver an exploit payload that would otherwise be

stopped (by ASLR). (CVE-2013-0914)

A memoery use after free error was discover in the Linux kernel's tmpfs

filesystem. A local user could exploit this flaw to gain privileges or

cause a denial of service (system crash). (CVE-2013-1767)

Mateusz Guzik discovered a race in the Linux kernel's keyring. A local user

could exploit this flaw to cause a denial of service (system crash).

(CVE-2013-1792)

Topics%20covered

Topics Covered

security advisory DoS Ubuntu system update kernel issue ASLR bypass

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  linux-image-3.0.0-32-generic    3.0.0-32.51
  linux-image-3.0.0-32-generic-pae  3.0.0-32.51
  linux-image-3.0.0-32-omap       3.0.0-32.51
  linux-image-3.0.0-32-powerpc    3.0.0-32.51
  linux-image-3.0.0-32-powerpc-smp  3.0.0-32.51
  linux-image-3.0.0-32-powerpc64-smp  3.0.0-32.51
  linux-image-3.0.0-32-server     3.0.0-32.51
  linux-image-3.0.0-32-virtual    3.0.0-32.51

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1787-1

CVE-2013-0914, CVE-2013-1767, CVE-2013-1792

Severity
critical
Lowest
Low
Medium
High
Critical

April 02, 2013

Topics%20covered

Topics Covered

security advisory DoS Ubuntu system update kernel issue ASLR bypass

Package Information

https://launchpad.net/ubuntu/+source/linux/3.0.0-32.51

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.