USN-1379-1: Linux kernel vulnerabilities
Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. (CVE-2011-1927) A flaw was found in the Linux Ethernet bridge's handling of IGMP (Internet Group Management Protocol) packets. An unprivileged local user could exploit this flaw to crash the system. (CVE-2011-0716) A flaw was discovered in the Linux kernel's AppArmor security interface when invalid information was written to it. An unprivileged local user could use this to cause a denial of service on the system. (CVE-2011-3619)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-1379-1?
The severity of USN-1379-1 is assessed as high due to the potential for remote denial of service attacks.
How do I fix USN-1379-1?
To fix USN-1379-1, update your system to linux-image-2.6.35-32.66 or newer.
Which versions of Ubuntu are affected by USN-1379-1?
Ubuntu 10.10 with linux-image versions prior to 2.6.35-32.66 are affected by USN-1379-1.
What type of attack does USN-1379-1 mitigate?
USN-1379-1 mitigates a denial of service attack that can be triggered by sending malicious IPv4 ICMP packets.
Who reported the vulnerability in USN-1379-1?
The vulnerability described in USN-1379-1 was reported by Aristide Fattori and Roberto Paleari.