SB2015070109 - Ubuntu update for linux, linux-source-2.6.15

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2015070109

SB2015070109 - Ubuntu update for linux, linux-source-2.6.15

Published: July 1, 2015 Updated: October 31, 2026

Security Bulletin ID SB2015070109
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 15
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 27% Low 73%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 15 vulnerabilities.


1) Configuration (CVE-ID: CVE-2009-1072)

CWE-ID: CWE-16 - Configuration

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to manipulate data.

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.


2) Configuration (CVE-ID: CVE-2009-1184)

CWE-ID: CWE-16 - Configuration

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to read and manipulate data.

The vulnerability exists due to configuration error. A local user can read and manipulate data.


3) Buffer overflow (CVE-ID: CVE-2009-1192)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to gain access to sensitive information.

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not 0 out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.


4) Improper input validation (CVE-ID: CVE-2009-1242)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation error within the vmx_set_msr() function in arch/x86/kvm/vmx.c. A local user can perform a denial of service (DoS) attack.


5) Integer overflow (CVE-ID: CVE-2009-1265)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The vulnerability exists due to integer overflow within the x25_sendmsg() function in net/x25/af_x25.c, within the rose_sendmsg() function in net/rose/af_rose.c, within the nr_sendmsg() function in net/netrom/af_netrom.c. A remote non-authenticated attacker can gain access to sensitive information.


6) Improper input validation (CVE-ID: CVE-2009-1336)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation error within the nfs_readdir_lookup() function in fs/nfs/dir.c, within the nfs_init_server(), nfs_create_server(), nfs4_create_server(), nfs4_create_referral_server() and nfs_clone_server() functions in fs/nfs/client.c. A local user can perform a denial of service (DoS) attack.


7) Permissions, privileges, and access controls (CVE-ID: CVE-2009-1337)

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to read and manipulate data.

The vulnerability exists due to security restrictions bypass error within the exit_notify() function in kernel/exit.c. A local user can read and manipulate data.


8) Permissions, privileges, and access controls (CVE-ID: CVE-2009-1338)

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to read and manipulate data.

The vulnerability exists due to security restrictions bypass error within the kill_something_info() function in kernel/signal.c. A local user can read and manipulate data.


9) NULL pointer dereference (CVE-ID: CVE-2009-1360)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the net/ipv6/inet6_hashtables.c. A remote non-authenticated attacker can perform a denial of service (DoS) attack.


10) Integer overflow (CVE-ID: CVE-2009-1385)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow error. A remote non-authenticated attacker can perform a denial of service (DoS) attack.


11) Buffer overflow (CVE-ID: CVE-2009-1439)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the CIFSTCon() function in fs/cifs/connect.c. A remote non-authenticated attacker can perform a denial of service (DoS) attack.


12) Security restrictions bypass (CVE-ID: CVE-2009-1630)

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to read and manipulate data.

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.


13) Memory corruption (CVE-ID: CVE-2009-1633)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption error. A remote non-authenticated attacker can perform a denial of service (DoS) attack.


14) Improper Initialization (CVE-ID: CVE-2009-1914)

CWE-ID: CWE-665 - Improper Initialization

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper initialization within the pci_register_iommu_region() function in arch/sparc/kernel/pci_common.c. A local user can perform a denial of service (DoS) attack.


15) Improper locking (CVE-ID: CVE-2009-1961)

CWE-ID: CWE-667 - Improper Locking

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to perform a denial of service attack (DoS) on the target system.

The vulnerability exists due to improper locking within fs/ocfs2/file.c. A local user can perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References