USN-1269-1: Linux kernel (EC2) vulnerabilities
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. (CVE-2011-2491) Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-2496) It was discovered that the wireless stack incorrectly verified SSID lengths. A local attacker could exploit this to cause a denial of service or gain root privileges. (CVE-2011-2517) Ben Pfaff discovered that Classless Queuing Disciplines (qdiscs) were being incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-2525)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1269-1?
The severity of USN-1269-1 is classified as a denial of service vulnerability due to improper handling of NFS Lock Manager unlock requests.
How do I fix USN-1269-1?
To fix USN-1269-1, update the affected package to linux-image-2.6.32-340-ec2 version 2.6.32-340.40 or later.
What systems are affected by USN-1269-1?
USN-1269-1 affects Ubuntu 10.04 systems using the linux-image-2.6.32-340-ec2 package.
What types of attacks can exploit USN-1269-1?
Local attackers can exploit USN-1269-1 to cause denial of service through incorrect handling of mapping extensions and unlock requests.
Who discovered the vulnerabilities addressed by USN-1269-1?
The vulnerabilities in USN-1269-1 were discovered by researchers Vasily Averin and Robert Swiecki.