What is the severity of USN-1647-1?

The severity of USN-1647-1 is considered high due to the potential for local attackers to exploit the vulnerabilities.

How do I fix USN-1647-1?

To fix USN-1647-1, you should update your Linux kernel to the latest version provided by Ubuntu.

Which versions of Ubuntu are affected by USN-1647-1?

USN-1647-1 affects Ubuntu version 12.10 that includes the linux-image-3.5.0-215-omap4 package.

What vulnerabilities are addressed in USN-1647-1?

USN-1647-1 addresses multiple vulnerabilities including CVE-2012-0957, CVE-2012-4565, and CVE-2012-6536.

Can an unprivileged user exploit USN-1647-1?

Yes, an unprivileged user can exploit USN-1647-1 to read kernel stack memory due to flaws in the Linux kernel.

Vulnerability/
USN-1647-1

30/11/2012

USN-1647-1: Linux kernel (OMAP4) vulnerabilities

First published: Fri Nov 30 2012(Updated: )

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. (CVE-2012-0957) Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. (CVE-2012-4565) Mathias Krause discovered a flaw in the Linux kernel's XFRM netlink interface. A local user with the NET_ADMIN capability could exploit this flaw to leak the contents of kernel memory. (CVE-2012-6536) Mathias Krause discovered several errors in the Linux kernel's xfrm_user implementation. A local attacker could exploit these flaws to examine parts of kernel memory. (CVE-2012-6537) Mathias Krause discovered an information leak in the Linux kernel's xfrm_user copy_to_user_auth function. A local user could exploit this flaw to examine parts of kernel heap memory. (CVE-2012-6538) A flaw was discovered in the Linux kernels handling of memory ranges with PROT_NONE when transparent hugepages are in use. An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). (CVE-2013-0309) Mathias Krause discovered a flaw in xfrm_user in the Linux kernel. A local attacker with NET_ADMIN capability could potentially exploit this flaw to escalate privileges. (CVE-2013-1826)

Affected Software	Affected Version	How to fix
All of
ubuntu/linux-image-3.5.0-215-omap4	<3.5.0-215.22	3.5.0-215.22
Ubuntu gir1.2-packagekitglib-1.0	=12.10

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

Frequently Asked Questions

What is the severity of USN-1647-1?
The severity of USN-1647-1 is considered high due to the potential for local attackers to exploit the vulnerabilities.
How do I fix USN-1647-1?
To fix USN-1647-1, you should update your Linux kernel to the latest version provided by Ubuntu.
Which versions of Ubuntu are affected by USN-1647-1?
USN-1647-1 affects Ubuntu version 12.10 that includes the linux-image-3.5.0-215-omap4 package.
What vulnerabilities are addressed in USN-1647-1?
USN-1647-1 addresses multiple vulnerabilities including CVE-2012-0957, CVE-2012-4565, and CVE-2012-6536.
Can an unprivileged user exploit USN-1647-1?
Yes, an unprivileged user can exploit USN-1647-1 to read kernel stack memory due to flaws in the Linux kernel.

agent/severity
agent/type
agent/first-publish-date
agent/last-modified-date
agent/references
agent/title
agent/description
agent/event
agent/trending
agent/source
agent/softwarecombine
agent/tags
collector/usn
source/Ubuntu
agent/software-canonical-lookup
agent/software-canonical-lookup-request
package-manager/ubuntu
vendor/ubuntu
canonical/ubuntu gir1.2-packagekitglib-1.0
version/ubuntu gir1.2-packagekitglib-1.0/12.10