First published: Tue Dec 03 2013(Updated: )
A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. (CVE-2013-4299) Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.5.0-236-omap4 | <3.5.0-236.52 | 3.5.0-236.52 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-2044-1 is considered high due to the potential for remote authenticated users to exploit the vulnerability.
To fix USN-2044-1, you should update the affected Linux kernel package to version 3.5.0-236.53 or later.
USN-2044-1 affects Ubuntu version 12.10 with the linux-image-3.5.0-236-omap4 package.
The vulnerability in USN-2044-1 was discovered by Hannes Frederic Sowa.
USN-2044-1 is a security vulnerability in the Linux kernel's dm snapshot facility and UDP Fragmentation Offload (UFO).