Stay Secure with the Latest Linux Advisories

security advisorycriticalUbuntu

Ubuntu 6.10/7.04/7.10 USN-558-1 Critical Kernel Denial Of Service

The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. (CVE-2006-6058) Certain calculations in the hugetlb code were not correct. A local attacker could exploit this to cause a kernel panic, leading to a denial of service.. =========================================================== Ubuntu Security Notice USN-558-1 December 19, 2007 linux-source-2.6.17/20/22 vulnerabilities CVE-2006-6058, CVE-2007-4133, CVE-2007-4567, CVE-2007-4849, CVE-2007-4997, CVE-2007-5093, CVE-2007-5500, CVE-2007-5501 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.10: linux-image-2.6.17-12-386 2.6.17.1-12.42 linux-image-2.6.17-12-generic 2.6.17.1-12.42 linux-image-2.6.17-12-hppa32 2.6.17.1-12.42 linux-image-2.6.17-12-hppa64 2.6.17.1-12.42 linux-image-2.6.17-12-itanium 2.6.17.1-12.42 linux-image-2.6.17-12-mckinley 2.6.17.1-12.42 linux-image-2.6.17-12-powerpc 2.6.17.1-12.42 linux-image-2.6.17-12-powerpc-smp 2.6.17.1-12.42 linux-image-2.6.17-12-powerpc64-smp 2.6.17.1-12.42 linux-image-2.6.17-12-server 2.6.17.1-12.42 linux-image-2.6.17-12-server-bigiron 2.6.17.1-12.42 linux-image-2.6.17-12-sparc64 2.6.17.1-12.42 linux-image-2.6.17-12-sparc64-smp 2.6.17.1-12.42 Ubuntu 7.04: linux-image-2.6.20-16-386 2.6.20-16.33 linux-image-2.6.20-16-generic 2.6.20-16.33 linux-image-2.6.20-16-hppa32 2.6.20-16.33 linux-image-2.6.20-16-hppa64 2.6.20-16.33 linux-image-2.6.20-16-itanium 2.6.20-16.33 linux-image-2.6.20-16-lowlatency 2.6.20-16.33 linux-image-2.6.20-16-mckinley 2.6.20-16.33 linux-image-2.6.20-16-powerpc 2.6.20-16.33 linux-image-2.6.20-16-powerpc-smp 2.6.20-16.33 linux-image-2.6.20-16-powerpc64-smp 2.6.20-16.33 linux-image-2.6.20-16-server 2.6.20-16.33 linux-image-2.6.20-16-server-bigiron 2.6.20-16.33 linux-image-2.6.20-16-sparc64 2.6.20-16.33 linux-image-2.6.20-16-sparc64-smp 2.6.20-16.33 Ubuntu 7.10: linux-image-2.6.22-14-386 2.6.22-14.47 linux-image-2.6.22-14-cell 2.6.22-14.47 linux-image-2.6.22-14-generic 2.6.22-14.47 linux-image-2.6.22-14-hppa32 2.6.22-14.47 linux-image-2.6.22-14-hppa64 2.6.22-14.47 linux-image-2.6.22-14-itanium 2.6.22-14.47 linux-image-2.6.22-14-lpia 2.6.22-14.47 linux-image-2.6.22-14-lpiacompat 2.6.22-14.47 linux-image-2.6.22-14-mckinley 2.6.22-14.47 linux-image-2.6.22-14-powerpc 2.6.22-14.47 linux-image-2.6.22-14-powerpc-smp 2.6.22-14.47 linux-image-2.6.22-14-powerpc64-smp 2.6.22-14.47 linux-image-2.6.22-14-rt 2.6.22-14.47 linux-image-2.6.22-14-server 2.6.22-14.47 linux-image-2.6.22-14-sparc64 2.6.22-14.47 linux-image-2.6.22-14-sparc64-smp 2.6.22-14.47 linux-image-2.6.22-14-ume 2.6.22-14.47 linux-image-2.6.22-14-virtual 2.6.22-14.47 linux-image-2.6.22-14-xen 2.6.22-14.47 After a standard system upgrade you need to reboot your computer to effect the necessary changes. Details follow: The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. (CVE-2006-6058) Certain calculations in the hugetlb code were not correct. A local attacker couldexploit this to cause a kernel panic, leading to a denial of service. (CVE-2007-4133) Eric Sesterhenn and Victor Julien discovered that the hop-by-hop IPv6 extended header was not correctly validated. If a system was configured for IPv6, a remote attacker could send a specially crafted IPv6 packet and cause the kernel to panic, leading to a denial of service. This was only vulnerable in Ubuntu 7.04. (CVE-2007-4567) Permissions were not correctly stored on JFFS2 ACLs. For systems using ACLs on JFFS2, a local attacker may gain access to private files. (CVE-2007-4849) Chris Evans discovered that the 802.11 network stack did not correctly handle certain QOS frames. A remote attacker on the local wireless network could send specially crafted packets that would panic the kernel, resulting in a denial of service. (CVE-2007-4997) The Philips USB Webcam driver did not correctly handle disconnects. If a local attacker tricked another user into disconnecting a webcam unsafely, the kernel could hang or consume CPU resources, leading to a denial of service. (CVE-2007-5093) Scott James Remnant discovered that the waitid function could be made to hang the system. A local attacker could execute a specially crafted program which would leave the system unresponsive, resulting in a denial of service. (CVE-2007-5500) Ilpo J. Urgent notice regarding significant kernel flaws impacting Ubuntu versions 6.10, 7.04, and 7.10, associated with potential Denial of Service attacks.. Kernel Vulnerabilities, Ubuntu Security, System Stability. . Severity: Critical. LinuxSecurity.com Team

Dec 18, 2007 •Critical Ubuntu