| Description: | Description:
The remote host is missing an update to linux-image-2.6.24-29-386
announced via advisory USN-1170-1.
Details:
Dan Rosenberg discovered that multiple terminal ioctls did not correctly
initialize structure memory. A local attacker could exploit this to read
portions of kernel stack memory, leading to a loss of privacy.
(CVE-2010-4076, CVE-2010-4077)
It was discovered that Xen did not correctly handle certain block requests.
A local attacker in a Xen guest could cause the Xen host to use all
available CPU resources, leading to a denial of service. (CVE-2010-4247)
It was discovered that the ICMP stack did not correctly handle certain
unreachable messages. If a remote attacker were able to acquire a socket
lock, they could send specially crafted traffic that would crash the
system, leading to a denial of service. (CVE-2010-4526)
Kees Cook reported that /proc/pid/stat did not correctly filter certain
memory locations. A local attacker could determine the memory layout of
processes in an attempt to increase the chances of a successful memory
corruption exploit. (CVE-2011-0726)
Timo Warns discovered that OSF partition parsing routines did not correctly
clear memory. A local attacker with physical access could plug in a
specially crafted block device to read kernel memory, leading to a loss of
privacy. (CVE-2011-1163)
Timo Warns discovered that the GUID partition parsing routines did not
correctly validate certain structures. A local attacker with physical
access could plug in a specially crafted block device to crash the system,
leading to a denial of service. (CVE-2011-1577)
Vasiliy Kulikov discovered that the AGP driver did not check certain ioctl
values. A local attacker with access to the video subsystem could exploit
this to crash the system, leading to a denial of service, or possibly gain
root privileges. (CVE-2011-1745, CVE-2011-2022)
Vasiliy Kulikov discovered that the AGP driver did not check the size of
certain memory allocations. A local attacker with access to the video
subsystem could exploit this to run the system out of memory, leading to a
denial of service. (CVE-2011-1746, CVE-2011-1747)
Solution:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 8.04 LTS:
linux-image-2.6.24-29-386 2.6.24-29.91
linux-image-2.6.24-29-generic 2.6.24-29.91
linux-image-2.6.24-29-hppa32 2.6.24-29.91
linux-image-2.6.24-29-hppa64 2.6.24-29.91
linux-image-2.6.24-29-itanium 2.6.24-29.91
linux-image-2.6.24-29-lpia 2.6.24-29.91
linux-image-2.6.24-29-lpiacompat 2.6.24-29.91
linux-image-2.6.24-29-mckinley 2.6.24-29.91
linux-image-2.6.24-29-openvz 2.6.24-29.91
linux-image-2.6.24-29-powerpc 2.6.24-29.91
linux-image-2.6.24-29-powerpc-smp 2.6.24-29.91
linux-image-2.6.24-29-powerpc64-smp 2.6.24-29.91
linux-image-2.6.24-29-rt 2.6.24-29.91
linux-image-2.6.24-29-server 2.6.24-29.91
linux-image-2.6.24-29-sparc64 2.6.24-29.91
linux-image-2.6.24-29-sparc64-smp 2.6.24-29.91
linux-image-2.6.24-29-virtual 2.6.24-29.91
linux-image-2.6.24-29-xen 2.6.24-29.91
http://www.securityspace.com/smysecure/catid.html?in=USN-1170-1
CVSS Score:
7.1
CVSS Vector:
AV:L/AC:H/Au:NR/C:N/I:N/A:C
|
