USN-3445-2: Linux kernel (Trusty HWE) vulnerabilities
USN-3445-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Eyal Itkin discovered that the IP over IEEE 1394 (FireWire) implementation in the Linux kernel contained a buffer overflow when handling fragmented packets. A remote attacker could use this to possibly execute arbitrary code with administrative privileges. (CVE-2016-8633) Andrey Konovalov discovered that a divide-by-zero error existed in the TCP stack implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-14106)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this advisory?
USN-3445-2
What is the severity level of this vulnerability?
The severity level of this vulnerability is not specified in the advisory.
How does this vulnerability affect Ubuntu 12.04 LTS?
This vulnerability affects Ubuntu 12.04 LTS through the Linux kernel versions listed in the advisory.
What is the remedy for this vulnerability?
The recommended remedy for this vulnerability is to update to the specified version of the Linux kernel.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the advisory linked in the description.