USN-1271-1: Linux kernel (FSL-IMX51) vulnerabilities
It was discovered that CIFS incorrectly handled authentication. When a user had a CIFS share mounted that required authentication, a local user could mount the same share without knowing the correct password. (CVE-2011-1585) It was discovered that the GRE protocol incorrectly handled netns initialization. A remote attacker could send a packet while the ipgre module was loading, and crash the system, leading to a denial of service. (CVE-2011-1767) It was discovered that the IP/IP protocol incorrectly handled netns initialization. A remote attacker could send a packet while the ipip module was loading, and crash the system, leading to a denial of service. (CVE-2011-1768) Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. (CVE-2011-2491)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1271-1?
The severity of USN-1271-1 is considered to be high due to the potential for unauthorized access to CIFS shares.
How do I fix USN-1271-1?
To fix USN-1271-1, update the affected package to version 2.6.31-612.30 or later.
Which systems are affected by USN-1271-1?
USN-1271-1 affects Ubuntu 10.04 systems that utilize the linux-image-2.6.31-612-imx51 package.
What does USN-1271-1 exploit?
USN-1271-1 exploits a vulnerability in CIFS that allows a local user to mount shares without the correct password.
What is CVE-2011-1585 related to USN-1271-1?
CVE-2011-1585 is the specific identifier for the vulnerability addressed in USN-1271-1 that affects CIFS authentication.