USN-2681-1

Dashboard / Vulnerabilities / USN-2681-1

USN-2681-1

Summary: linux vulnerabilities

Details: A flaw was discovered in the user space memory copying for the pipe iovecs in the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-1805) A flaw was discovered in the kvm (kernel virtual machine) subsystem's kvm_apic_has_events function. A unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4692) Daniel Borkmann reported a kernel crash in the Linux kernel's BPF filter JIT optimization. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4700) A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker could exploit this flaw to cause a denial of service using a flood of UDP packets with invalid checksums. (CVE-2015-5364) A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker can cause a denial of service against applications that use epoll by injecting a single packet with an invalid checksum. (CVE-2015-5366) A double free flaw was discovered in the Linux kernel's path lookup. A local user could cause a denial of service (Oops). (CVE-2015-5706)

References: https://ubuntu.com/security/notices/USN-2681-1, https://ubuntu.com/security/CVE-2015-1805, https://ubuntu.com/security/CVE-2015-4692, https://ubuntu.com/security/CVE-2015-4700, https://ubuntu.com/security/CVE-2015-5364, https://ubuntu.com/security/CVE-2015-5366, https://ubuntu.com/security/CVE-2015-5706