USN-2683-1

Dashboard / Vulnerabilities / USN-2683-1

USN-2683-1

Summary: linux-lts-vivid vulnerabilities

Details: A flaw was discovered in the kvm (kernel virtual machine) subsystem's kvm_apic_has_events function. A unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4692) Daniel Borkmann reported a kernel crash in the Linux kernel's BPF filter JIT optimization. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4700) A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker could exploit this flaw to cause a denial of service using a flood of UDP packets with invalid checksums. (CVE-2015-5364) A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker can cause a denial of service against applications that use epoll by injecting a single packet with an invalid checksum. (CVE-2015-5366)

References: https://ubuntu.com/security/notices/USN-2683-1, https://ubuntu.com/security/CVE-2015-4692, https://ubuntu.com/security/CVE-2015-4700, https://ubuntu.com/security/CVE-2015-5364, https://ubuntu.com/security/CVE-2015-5366