*** This bug is a security vulnerability ***
Public security bug reported:
Pablo Neira Ayuso discovered that avahi and potentially NetworkManager
accept spoofed Netlink messages because of a kernel bug. The kernel
passes all-zero SCM_CREDENTIALS ancillary data to the receiver if the
sender did not provide such data, instead of not including any such data
at all or including the correct data from the peer (as it is the case
with AF_UNIX).
Break-Fix: 16e5726269611b71c930054ffe9b858c1cea88eb
e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea
** Affects: linux (Ubuntu)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu)
Importance: Undecided
Status: New
** Affects: linux-ec2 (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux-fsl-imx51 (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-maverick (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-natty (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-oneiric (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux-mvl-dove (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Lucid)
Importance: Undecided
Status: Invalid
** Affects: linux-ec2 (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-fsl-imx51 (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-lts-backport-maverick (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-lts-backport-natty (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-lts-backport-oneiric (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-mvl-dove (Ubuntu Lucid)
Importance: Undecided
Status: New
** Affects: linux-ti-omap4 (Ubuntu Lucid)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Natty)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-ec2 (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-fsl-imx51 (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-maverick (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-natty (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-oneiric (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-mvl-dove (Ubuntu Natty)
Importance: Undecided
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Natty)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Oneiric)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-ec2 (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-fsl-imx51 (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-maverick (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-natty (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-oneiric (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-mvl-dove (Ubuntu Oneiric)
Importance: Undecided
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Oneiric)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Precise)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Precise)
Importance: Undecided
Status: New
** Affects: linux-ec2 (Ubuntu Precise)
Importance: Undecided
Status: Invalid
** Affects: linux-fsl-imx51 (Ubuntu Precise)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-maverick (Ubuntu Precise)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-natty (Ubuntu Precise)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-oneiric (Ubuntu Precise)
Importance: Undecided
Status: Invalid
** Affects: linux-mvl-dove (Ubuntu Precise)
Importance: Undecided
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Precise)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Quantal)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Quantal)
Importance: Undecided
Status: New
** Affects: linux-ec2 (Ubuntu Quantal)
Importance: Undecided
Status: Invalid
** Affects: linux-fsl-imx51 (Ubuntu Quantal)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-maverick (Ubuntu Quantal)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-natty (Ubuntu Quantal)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-oneiric (Ubuntu Quantal)
Importance: Undecided
Status: Invalid
** Affects: linux-mvl-dove (Ubuntu Quantal)
Importance: Undecided
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Quantal)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Hardy)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-ec2 (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-fsl-imx51 (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-maverick (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-natty (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-lts-backport-oneiric (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-mvl-dove (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Hardy)
Importance: Undecided
Status: Invalid
** Tags: kernel-cve-tracking-bug
** Tags added: kernel-cve-tracking-bug
** This bug has been flagged as a security vulnerability
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3520
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1052097
Title:
CVE-2012-3520
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1052097/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
