USN-1086-1: Linux kernel (EC2) vulnerabilities
Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. (CVE-2010-4075) Dan Rosenberg discovered that the socket filters did not correctly initialize structure memory. A local attacker could create malicious filters to read portions of kernel stack memory, leading to a loss of privacy. (CVE-2010-4158) Dan Rosenberg discovered that the SCSI subsystem did not correctly validate iov segments. A local attacker with access to a SCSI device could send specially crafted requests to crash the system, leading to a denial of service. (CVE-2010-4163, CVE-2010-4668)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1086-1?
USN-1086-1 is considered a significant vulnerability due to its potential to expose kernel stack memory, leading to privacy issues for users.
How do I fix USN-1086-1?
To fix USN-1086-1, you should update your system to the latest kernel version provided by Ubuntu.
Who discovered the vulnerability in USN-1086-1?
The vulnerability in USN-1086-1 was discovered by Dan Rosenberg.
What are the potential consequences of exploiting USN-1086-1?
Exploiting USN-1086-1 could allow a local attacker to read sensitive portions of kernel stack memory, compromising user privacy.
What versions of Ubuntu are affected by USN-1086-1?
Ubuntu 10.04 is among the affected versions relating to USN-1086-1.