Summary
Check the version of linux
Solution
Please Install the Updated Packages.
Insight
Andy Lutomirski discovered an information
leak in the Linux kernel's Thread
Local Storage (TLS) implementation allowing users to bypass the espfix to obtain information that could be used to bypass the Address Space Layout Randomization (ASLR) protection mechanism. A local user could exploit this flaw to obtain potentially sensitive information from kernel memory.
(CVE-2014-8133)
Prasad J Pandit reported a flaw in the rock_continue function of the Linux kernel's ISO 9660 CDROM file system. A local user could exploit this flaw to cause a denial of service (system crash or hang). (CVE-2014-9420)
Affected
linux on Ubuntu 10.04 LTS
Detection
Get the installed version with the help of
detect NVT and check if the version is vulnerable or not.
Severity
Classification
-
CVE CVE-2014-8133, CVE-2014-9420 -
CVSS Base Score: 4.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
Related Vulnerabilities