USN-2355-1: Linux kernel (EC2) vulnerabilities
Chris Evans reported an flaw in the Linux kernel's handling of iso9660 (compact disk filesystem) images. An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause a denial of service (system crash or reboot). (CVE-2014-5471) Chris Evans reported an flaw in the Linux kernel's handling of iso9660 (compact disk filesystem) images. An attacker who can mount a custom iso9660 image, with a self-referential CL entry, either via a CD/DVD drive or a loopback mount could cause a denial of service (unkillable mount process). (CVE-2014-5472)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-2355-1?
USN-2355-1 is considered a denial of service vulnerability that can lead to a system crash or reboot.
How do I fix USN-2355-1?
To mitigate USN-2355-1, update the linux-image-2.6.32-370-ec2 package to version 2.6.32-370.86 or later.
Which Ubuntu versions are affected by USN-2355-1?
USN-2355-1 affects Ubuntu version 10.04 with the specified kernel package.
What is the root cause of USN-2355-1?
The vulnerability is caused by a flaw in the Linux kernel's handling of iso9660 filesystem images.
Can an attacker exploit USN-2355-1 remotely?
An attacker must have physical access to mount a custom iso9660 image to exploit USN-2355-1.