- Vulnerability/
- USN-1242-1
USN-1242-1: Linux kernel (Maverick backport) vulnerabilities
First published: Tue Oct 25 2011(Updated: )
It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-1479) Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. (CVE-2011-2494) Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. (CVE-2011-2495) It was discovered that the EXT4 filesystem contained multiple off-by-one flaws. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-2695) Christian Ohm discovered that the perf command looks for configuration files in the current directory. If a privileged user were tricked into running perf in a directory containing a malicious configuration file, an attacker could run arbitrary commands and possibly gain privileges. (CVE-2011-2905) Vasiliy Kulikov discovered that the Comedi driver did not correctly clear memory. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. (CVE-2011-2909) Dan Kaminsky discovered that the kernel incorrectly handled random sequence number generation. An attacker could use this flaw to possibly predict sequence numbers and inject packets. (CVE-2011-3188) Yogesh Sharma discovered that CIFS did not correctly handle UNCs that had no prefixpaths. A local attacker with access to a CIFS partition could exploit this to crash the system, leading to a denial of service. (CVE-2011-3363)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-2.6.35-30-generic-pae | <2.6.35-30.61~lucid1 | 2.6.35-30.61~lucid1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =10.04 | |
| All of | ||
| ubuntu/linux-image-2.6.35-30-server | <2.6.35-30.61~lucid1 | 2.6.35-30.61~lucid1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =10.04 | |
| All of | ||
| ubuntu/linux-image-2.6.35-30-generic | <2.6.35-30.61~lucid1 | 2.6.35-30.61~lucid1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =10.04 | |
| All of | ||
| ubuntu/linux-image-2.6.35-30-virtual | <2.6.35-30.61~lucid1 | 2.6.35-30.61~lucid1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =10.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2011-1479
- https://ubuntu.com/security/CVE-2011-2494
- https://ubuntu.com/security/CVE-2011-2495
- https://ubuntu.com/security/CVE-2011-2695
- https://ubuntu.com/security/CVE-2011-2905
- https://ubuntu.com/security/CVE-2011-2909
- https://ubuntu.com/security/CVE-2011-3188
- https://ubuntu.com/security/CVE-2011-3363
- https://ubuntu.com/security/notices/USN-1243-1
- https://ubuntu.com/security/notices/USN-1167-1
- https://ubuntu.com/security/notices/USN-1256-1
- https://ubuntu.com/security/notices/USN-1212-1
- https://ubuntu.com/security/notices/USN-1294-1
- https://ubuntu.com/security/notices/USN-1241-1
- https://ubuntu.com/security/notices/USN-1253-1
- https://ubuntu.com/security/notices/USN-1239-1
- https://ubuntu.com/security/notices/USN-1281-1
- https://ubuntu.com/security/notices/USN-1285-1
- https://ubuntu.com/security/notices/USN-1279-1
- https://ubuntu.com/security/notices/USN-1236-1
- https://ubuntu.com/security/notices/USN-1275-1
- https://ubuntu.com/security/notices/USN-1244-1
- https://ubuntu.com/security/notices/USN-1240-1
- https://ubuntu.com/security/notices/USN-1260-1
- https://ubuntu.com/security/notices/USN-1245-1
- https://ubuntu.com/security/notices/USN-1228-1
- https://ubuntu.com/security/notices/USN-1246-1
- https://ubuntu.com/security/notices/USN-1208-1
- https://ubuntu.com/security/notices/USN-1203-1
- https://ubuntu.com/security/notices/USN-1218-1
- https://ubuntu.com/security/notices/USN-1216-1
- https://ubuntu.com/security/notices/USN-1220-1
- https://ubuntu.com/security/notices/USN-1168-1
- https://ubuntu.com/security/notices/USN-1162-1
- https://ubuntu.com/security/notices/USN-1161-1
- https://ubuntu.com/security/notices/USN-1159-1
- https://launchpad.net/ubuntu/+source/linux-lts-backport-maverick/2.6.35-30.61~lucid1
- https://ubuntu.com/security/notices/USN-1242-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-1242-1?
USN-1242-1 is considered a critical vulnerability as it can lead to a denial of service.
How do I fix USN-1242-1?
To fix USN-1242-1, update your Ubuntu system to the version 2.6.35-30.61~lucid1 or later.
What vulnerabilities are addressed in USN-1242-1?
USN-1242-1 addresses CVE-2011-1479 along with regressions related to previous security fixes.
Who discovered the vulnerabilities reported in USN-1242-1?
Vasiliy Kulikov discovered the vulnerabilities reported in USN-1242-1.
In which Ubuntu versions does USN-1242-1 apply?
USN-1242-1 applies to Ubuntu version 10.04 specifically for certain Linux image packages.
- agent/references
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/10.04