Lucene search

K
ubuntuUbuntuUSN-1535-1
HistoryAug 10, 2012 - 12:00 a.m.

Linux kernel vulnerabilities

2012-08-1000:00:00
ubuntu.com
54

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

High

EPSS

0

Percentile

5.1%

Releases

  • Ubuntu 10.04

Packages

  • linux - Linux kernel

Details

An error was discovered in the Linux kernel’s network TUN/TAP device
implementation. A local user with access to the TUN/TAP interface (which is
not available to unprivileged users until granted by a root user) could
exploit this flaw to crash the system or potential gain administrative
privileges. (CVE-2012-2136)

An error was discovered in the Linux kernel’s memory subsystem (hugetlb).
An unprivileged local user could exploit this flaw to cause a denial of
service (crash the system). (CVE-2012-2390)

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

High

EPSS

0

Percentile

5.1%