Articles by KENNETH

USN-3471-1: Quagga vulnerabilities Ubuntu Security Notice USN-3471-1 31st October, 2017 quagga vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in Quagga. Software description quagga – BGP/OSPF/RIP routing daemon Details Andreas Jaggi discovered that Quagga incorrectly handled certain BGP UPDATEmessages. A remote attacker could possibly use this issue to cause Quaggato crash, resulting in a denial of service. (CVE-2017-16227) Quentin Young discovered that Quagga incorrectly handled memory in thetelnet vty CLI. An attacker able to connect to the telnet interface couldpossibly use this issue to cause Quagga to consume memory, resulting in adenial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu16.04 LTS. (CVE-2017-5495) Update instructions The problem can be corrected by updating your system to the following package [ more… ]

USN-3470-2: Linux kernel (Trusty HWE) vulnerabilities Ubuntu Security Notice USN-3470-2 31st October, 2017 linux-lts-trusty vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 LTS Summary Several security issues were fixed in the Linux kernel. Software description linux-lts-trusty – Linux hardware enablement kernel from Trusty for Precise ESM Details USN-3470-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04LTS. This update provides the corresponding updates for the LinuxHardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu12.04 ESM. Qian Zhang discovered a heap-based buffer overflow in the tipc_msg_build()function in the Linux kernel. A local attacker could use to cause a denialof service (system crash) or possibly execute arbitrary code withadministrative privileges. (CVE-2016-8632) Dmitry Vyukov discovered that a race condition existed in the timerfdsubsystem of the Linux kernel when handling might_cancel queuing. A localattacker could use this [ more… ]