Advisories Blog | G5 Cyber Security

Ubuntu Security Notice 869-1

Ubuntu Security Notice 869-1 – David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets. A remote attacker could send specially crafted traffic that would cause a system to crash, leading to a denial of service. (The fix was included in the earlier kernels from USN-864-1.) Akira Fujita discovered that the Ext4 “move extents” ioctl did not correctly check permissions. A local attacker could exploit this to overwrite arbitrary files on the system, leading to root privilege escalation.

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/83688/USN-869-1.txt

Source: https://packetstormsecurity.com/files/83688/Ubuntu-Security-Notice-869-1.html

Exit mobile version