First published: Fri Feb 03 2017(Updated: )
Andrey Konovalov discovered that the SCTP implementation in the Linux kernel improperly handled validation of incoming data. A remote attacker could use this to cause a denial of service (system crash). (CVE-2016-9555) It was discovered that multiple memory leaks existed in the XFS implementation in the Linux kernel. A local attacker could use this to cause a denial of service (memory consumption). (CVE-2016-9685)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.2.0-121-powerpc-smp | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-powerpc-smp | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-121-highbank | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-121-powerpc64-smp | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-121-virtual | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-121-generic | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-121-generic-pae | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-generic-pae | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-highbank | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-121-omap | <3.2.0-121.164 | 3.2.0-121.164 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-virtual | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-powerpc64-smp | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-generic | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
All of | ||
ubuntu/linux-image-omap | <3.2.0.121.136 | 3.2.0.121.136 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-3187-1 is high.
The SCTP vulnerability CVE-2016-9555 can cause a denial of service, resulting in a system crash.
USN-3187-1 affects Ubuntu version 12.04.
To fix USN-3187-1, update to Linux kernel version 3.2.0-121.164 or higher.
You can find more information about USN-3187-1 at the following references: [link1], [link2], [link3].