Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1776-1)

Medium Nessus Plugin ID 65667

Synopsis

The remote Ubuntu host is missing a security-related patch.

Description

A flaw was reported in the permission checks done by the Linux kernel for /dev/cpu/*/msr. A local root user with all capabilities dropped could exploit this flaw to execute code with full root capabilities.
(CVE-2013-0268)

A flaw was discovered in the Linux kernels handling of memory ranges with PROT_NONE when transparent hugepages are in use. An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). (CVE-2013-0309)

A flaw was discovered on the Linux kernel's VFAT filesystem driver when a disk is mounted with the utf8 option (this is the default on Ubuntu). On a system where disks/images can be auto-mounted or a FAT filesystem is mounted an unprivileged user can exploit the flaw to gain root privileges. (CVE-2013-1773).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected linux-image-2.6-ec2 package.

See Also

https://usn.ubuntu.com/1776-1/

Plugin Details

Severity: Medium

ID: 65667

File Name: ubuntu_USN-1776-1.nasl

Version: 1.9

Type: local

Agent: unix

Published: 2013/03/24

Updated: 2019/03/26

Dependencies: 12634, 122878

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 6.2

Temporal Score: 4.9

Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:canonical:ubuntu_linux:linux-image-2.6-ec2, cpe:/o:canonical:ubuntu_linux:10.04:-:lts

Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2013/03/22

Vulnerability Publication Date: 2013/02/17

Reference Information

CVE: CVE-2013-0268, CVE-2013-0309, CVE-2013-1773

BID: 57838, 58046, 58200

USN: 1776-1