- Vulnerability/
- USN-3187-2
USN-3187-2: Linux kernel (OMAP4) vulnerabilities
First published: Thu Feb 09 2017(Updated: )
Andrey Konovalov discovered that the SCTP implementation in the Linux kernel improperly handled validation of incoming data. A remote attacker could use this to cause a denial of service (system crash). (CVE-2016-9555) It was discovered that multiple memory leaks existed in the XFS implementation in the Linux kernel. A local attacker could use this to cause a denial of service (memory consumption). (CVE-2016-9685)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-omap4 | <3.2.0.1499.94 | 3.2.0.1499.94 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
| All of | ||
| ubuntu/linux-image-3.2.0-1499-omap4 | <3.2.0-1499.126 | 3.2.0-1499.126 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2016-9555
- https://ubuntu.com/security/CVE-2016-9685
- https://ubuntu.com/security/notices/USN-3187-1
- https://ubuntu.com/security/notices/USN-3162-1
- https://ubuntu.com/security/notices/USN-3162-2
- https://ubuntu.com/security/notices/USN-3161-4
- https://ubuntu.com/security/notices/USN-3161-1
- https://ubuntu.com/security/notices/USN-3161-3
- https://ubuntu.com/security/notices/USN-3161-2
- https://ubuntu.com/security/notices/USN-3188-1
- https://ubuntu.com/security/notices/USN-3188-2
- https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1499.126
- https://ubuntu.com/security/notices/USN-3187-2 (Advisory)
Frequently Asked Questions
What is the severity of USN-3187-2?
The severity of USN-3187-2 is moderate.
How can a remote attacker exploit CVE-2016-9555?
A remote attacker can exploit CVE-2016-9555 by sending specially crafted data to the SCTP implementation in the Linux kernel, causing a system crash.
What is the affected version of Ubuntu?
Ubuntu 12.04 is affected by USN-3187-2.
How can I fix the vulnerability?
To fix the vulnerability, update to Linux kernel version 3.2.0-1499-omap4 (for Ubuntu 12.04) or version 3.2.0.1499.94 (for Ubuntu 12.04).
Where can I find more information about USN-3187-2?
You can find more information about USN-3187-2 on Ubuntu's security website.
- agent/severity
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/references
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/12.04