Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
Database
Search
Advisories by Product
Advisories by Vendor
Terminology
Report Vulnerability
Insecure Library Loading

Secunia Advisory SA41881

Ubuntu update for kernel
Secunia Advisory SA41881
Secunia VIM 4.0 - Free Trial
Release Date 2010-10-20
Last Update 2010-10-26
   
Popularity 1,805 view
Comments 0 comments

Criticality level Moderately criticalModerately critical
Impact Security Bypass
Spoofing
Exposure of system information
Exposure of sensitive information
Privilege escalation
DoS
System access
Where From remote
Authentication level This information is available to Secunia VIM customers
   
Report reliability This information is available to Secunia VIM customers
Solution Status Vendor Patch
   
Systems affected This information is available to Secunia VIM customers
Approve distribution This information is available to Secunia VIM customers
   
Operating System
Ubuntu Linux 10.04
Ubuntu Linux 10.10
Ubuntu Linux 6.06
Ubuntu Linux 8.04
Ubuntu Linux 9.04
Ubuntu Linux 9.10

Secunia CVSS Score This information is available to Secunia VIM Customers
CVE Reference(s) CVE-2009-4895 CVSS score available to Secunia VIM customers
CVE-2010-2066 CVSS score available to Secunia VIM customers
CVE-2010-2226 CVSS score available to Secunia VIM customers
CVE-2010-2248 CVSS score available to Secunia VIM customers
CVE-2010-2478 CVSS score available to Secunia VIM customers
CVE-2010-2495 CVSS score available to Secunia VIM customers
CVE-2010-2521 CVSS score available to Secunia VIM customers
CVE-2010-2524 CVSS score available to Secunia VIM customers
CVE-2010-2798 CVSS score available to Secunia VIM customers
CVE-2010-2942 CVSS score available to Secunia VIM customers
CVE-2010-2946 CVSS score available to Secunia VIM customers
CVE-2010-2954 CVSS score available to Secunia VIM customers
CVE-2010-2955 CVSS score available to Secunia VIM customers
CVE-2010-2960 CVSS score available to Secunia VIM customers
CVE-2010-2963 CVSS score available to Secunia VIM customers
CVE-2010-3015 CVSS score available to Secunia VIM customers
CVE-2010-3067 CVSS score available to Secunia VIM customers
CVE-2010-3078 CVSS score available to Secunia VIM customers
CVE-2010-3080 CVSS score available to Secunia VIM customers
CVE-2010-3084 CVSS score available to Secunia VIM customers
CVE-2010-3310 CVSS score available to Secunia VIM customers
CVE-2010-3432 CVSS score available to Secunia VIM customers
CVE-2010-3437 CVSS score available to Secunia VIM customers
CVE-2010-3442 CVSS score available to Secunia VIM customers
CVE-2010-3477 CVSS score available to Secunia VIM customers
CVE-2010-3705 CVSS score available to Secunia VIM customers
CVE-2010-3904 CVSS score available to Secunia VIM customers
  

Description

Ubuntu has issued an update for the kernel. This fixes some weaknesses, security issues, and vulnerabilities, which can be exploited by malicious, local users to disclose system and potentially sensitive information, conduct spoofing attacks, bypass certain security restrictions, cause a DoS (Denial of Service), and gain escalated privileges, and by malicious people to cause a DoS and potentially compromise a vulnerable system.

For more information:
SA37590
SA38499
SA39490
SA39982
SA40205
SA40691
SA40965
SA41234
SA41245
SA41263
SA41284
SA41378
SA41493
SA41650
SA41693

1) Errors within the implementation of the External Data Representation (XDR) for NFSv4 can be exploited to cause a kernel panic and potentially execute arbitrary code by sending specially crafted compound requests to the NFSv4 server.

2) An error within the GFS2 file system when handing certain rename operations can be exploited to cause a kernel crash.

3) An error within the SCTP implementation can be exploited to cause a crash by sending specially crafted network traffic.

4) An error within the SCTP implementation when handling HMAC calculations can be exploited to cause a crash by sending specially crafted network traffic.

5) An error within the RDS implementation can be exploited to execute arbitrary code with kernel privileges.


Solution
Apply updated packages.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
1) Neil Brown
2) Bob Peterson
3) Thomas Dreibholz
4, 5) Dan Rosenberg

Changelog
Further details available to Secunia VIM customers

Original Advisory
USN-1000-1:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2010-October/001181.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers


Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: Ubuntu update for kernel
 
No posts yet

-

You must be logged in to post a comment.




 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability