漏洞类别:Ubuntu
漏洞等级:
漏洞信息
It was discovered that a race condition existed in the procfs environ_read function in the Linux kernel, leading to an integer underflow.
漏洞危害
A local attacker could use this to expose sensitive information (kernel memory).
解决方案
Refer to Ubuntu advisory USN-3159-1 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-highbank)
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-powerpc64-smp)
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-powerpc-smp)
USN-3159-1: 12.04 (Precise) on src (linux-image-omap)
USN-3159-1: 12.04 (Precise) on src (linux-image-powerpc-smp)
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-virtual)
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-generic-pae)
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-generic)
USN-3159-1: 12.04 (Precise) on src (linux-image-virtual)
USN-3159-1: 12.04 (Precise) on src (linux-image-generic-pae)
USN-3159-1: 12.04 (Precise) on src (linux-image-powerpc64-smp)
USN-3159-1: 12.04 (Precise) on src (linux-image-generic)
USN-3159-1: 12.04 (Precise) on src (linux-image-highbank)
USN-3159-1: 12.04 (Precise) on src (linux-image-3.2.0-119-omap)
0day
文章评论