USN-1977-1: Linux kernel (EC2) vulnerabilities
An information leak was discovered in the handling of ICMPv6 Router Advertisement (RA) messages in the Linux kernel's IPv6 network stack. A remote attacker could exploit this flaw to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information. (CVE-2013-0343) Kees Cook discovered flaw in the Human Interface Device (HID) subsystem of the Linux kernel. A physically proximate attacker could exploit this flaw to execute arbitrary code or cause a denial of service (heap memory corruption) via a specially crafted device that provides an invalid Report ID. (CVE-2013-2888) Kees Cook discovered a flaw in the Human Interface Device (HID) subsystem of the Linux kerenl when CONFIGHIDPANTHERLORD is enabled. A physically proximate attacker could cause a denial of service (heap out-of-bounds write) via a specially crafted device. (CVE-2013-2892)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-1977-1?
The severity of USN-1977-1 is considered high due to the potential for a denial of service attack.
How do I fix USN-1977-1?
To fix USN-1977-1, you should upgrade to the patched version of the linux-image package for Ubuntu 10.04.
Which systems are affected by USN-1977-1?
USN-1977-1 affects Ubuntu 10.04 systems running the linux-image-2.6.32-357-ec2 package.
What kind of attack can exploit USN-1977-1?
A remote attacker can exploit USN-1977-1 to cause excessive retries and address-generation outages.
When was USN-1977-1 published?
USN-1977-1 was published as a security notice by Ubuntu on March 14, 2013.