Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1534-1)

Ubuntu Security Notice (C) 2012-2013 Canonical, Inc. / NASL script (C) 2012-2013 Tenable Network Security, Inc.


Synopsis :

The remote Ubuntu host is missing a security-related patch.

Description :

An error was discovered in the Linux kernel's network TUN/TAP device
implementation. A local user with access to the TUN/TAP interface
(which is not available to unprivileged users until granted by a root
user) could exploit this flaw to crash the system or potential gain
administrative privileges. (CVE-2012-2136)

An error was discovered in the Linux kernel's memory subsystem
(hugetlb). An unprivileged local user could exploit this flaw to cause
a denial of service (crash the system). (CVE-2012-2390).

Solution :

Update the affected linux-image-2.6.32-347-ec2 package.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)

Family: Ubuntu Local Security Checks

Nessus Plugin ID: 61512 ()

Bugtraq ID:

CVE ID: CVE-2012-2136
CVE-2012-2390