First published: Wed Jan 11 2012(Updated: )
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. (CVE-2011-1162) Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. (CVE-2011-2203) A flaw was found in the b43 driver in the Linux kernel. An attacker could use this flaw to cause a denial of service if the system has an active wireless interface using the b43 driver. (CVE-2011-3359) A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. (CVE-2011-4110)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-2.6.24-30-virtual | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-server | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-mckinley | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-sparc64-smp | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-xen | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-powerpc-smp | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-lpiacompat | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-sparc64 | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-rt | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-openvz | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-lpia | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-hppa64 | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-386 | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-powerpc | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-powerpc64-smp | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-itanium | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-hppa32 | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 | |
All of | ||
ubuntu/linux-image-2.6.24-30-generic | <2.6.24-30.98 | 2.6.24-30.98 |
Ubuntu gir1.2-packagekitglib-1.0 | =8.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The severity is categorized as high due to information leak vulnerabilities that could be exploited by local attackers.
To resolve this issue, upgrade the affected packages to version 2.6.24-30.98 as specified in the advisory.
USN-1323-1 affects various Ubuntu 8.04 systems running specific versions of the Linux kernel.
The vulnerabilities were discovered by Peter Huewe and Clement Lecigne.
The impact includes potential unauthorized access to sensitive TPM data by local unprivileged users.