Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1497-1
Solution
Please Install the Updated Packages.
Insight
Matthias Weckbecker discovered that, when using the OpenStack API to setup libvirt-based hypervisors, an authenticated user could inject files in arbitrary locations on the file system of the host running Nova. A remote attacker could use this to gain root privileges. This issue only affects Ubuntu 12.04 LTS. (CVE-2012-3360)
Pá
draig Brady discovered that an authenticated user could corrupt arbitrary files of the host running Nova. A remote attacker could use this to cause a denial of service or possibly gain privileges.
(CVE-2012-3361)
Affected
nova on Ubuntu 12.04 LTS ,
Ubuntu 11.10
Severity
Classification
-
CVE CVE-2012-3360, CVE-2012-3361 -
CVSS Base Score: 5.5
AV:N/AC:L/Au:S/C:N/I:P/A:P
Related Vulnerabilities