SB2015070736 - Ubuntu update for linux-lts-utopic
Published: July 7, 2015 Updated: October 31, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 vulnerabilities.
1) Race condition (CVE-ID: CVE-2015-1420)
CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.
2) Integer overflow (CVE-ID: CVE-2015-4001)
CWE-ID: CWE-190 - Integer overflow
CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The vulnerability exists due to integer overflow error within the oz_hcd_pd_reset() and oz_hcd_get_desc_cnf() functions in drivers/staging/ozwpan/ozhcd.c. A remote non-authenticated attacker can read and manipulate data.
3) Memory corruption (CVE-ID: CVE-2015-4002)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The vulnerability exists due to memory corruption error within the oz_usb_rx() function in drivers/staging/ozwpan/ozusbsvc1.c. A remote non-authenticated attacker can read and manipulate data.
4) Division by zero (CVE-ID: CVE-2015-4003)
CWE-ID: CWE-369 - Divide By Zero
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a division by zero error within the oz_usb_handle_ep_data() function in drivers/staging/ozwpan/ozusbsvc1.c. A remote non-authenticated attacker can perform a denial of service (DoS) attack.
5) Integer overflow (CVE-ID: CVE-2015-4167)
CWE-ID: CWE-190 - Integer overflow
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to integer overflow within the fs/udf/inode.c. A local user can perform a denial of service (DoS) attack.
6) Improper input validation (CVE-ID: CVE-2015-4700)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation error within the bpf_int_jit_compile() function in arch/x86/net/bpf_jit_comp.c. A local user can perform a denial of service (DoS) attack.
7) Input validation error (CVE-ID: CVE-2015-5706)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows local users to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup operation.
Remediation
Install update from vendor's website.