Summary
Ubuntu Update for Linux kernel vulnerabilities USN-662-1
Solution
Please Install the Updated Packages.
Insight
It was discovered that the Linux kernel could be made to hang temporarily when mounting corrupted ext2/3 filesystems. If a user were tricked into mounting a specially crafted filesystem, a remote attacker could cause system hangs, leading to a denial of service. (CVE-2008-3528)
Anders Kaseorg discovered that ndiswrapper did not correctly handle long ESSIDs. For a system using ndiswrapper, a physically near-by attacker could generate specially crafted wireless network traffic and execute arbitrary code with root privileges. (CVE-2008-4395)
Affected
linux vulnerability on Ubuntu 8.10
Severity
Classification
-
CVE CVE-2008-3528, CVE-2008-4395 -
CVSS Base Score: 8.3
AV:A/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities