Ubuntu 17.04 USN-3311-1 Critical: libnl Denial Of Service Risk

ubuntu

June 6, 2017

libnl could be made to crash or run programs.

Summary

libnl could be made to crash or run programs.

Software Description:

- libnl3: library for dealing with netlink sockets

Details:

It was discovered that libnl incorrectly handled memory when performing

certain operations. A local attacker could possibly use this issue to cause

libnl to crash, resulting in a denial of service, or execute arbitrary

code.

Topics Covered

security advisory denial of service ubuntu libnl memory handling issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libnl-3-200                     3.2.29-0ubuntu2.1

Ubuntu 16.10:
  libnl-3-200                     3.2.27-1ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  libnl-3-200                     3.2.27-1ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  libnl-3-200                     3.2.21-1ubuntu4.1

After a standard system update you need to reboot your computer to make
all the necessary changes.