Severity

High

Vendor

Canonical Ubuntu

Versions Affected

• Canonical Ubuntu 14.04

Description

It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative privileges (CVE-2017-1000364)

Roee Hay discovered that the parallel port printer driver in the Linux kernel did not properly bounds check passed arguments. A local attacker with write access to the kernel command line arguments could use this to execute arbitrary code. (CVE-2017-1000363)

A reference count bug was discovered in the Linux kernel ipx protocol stack. A local attacker could exploit this flaw to cause a denial of service or possibly other unspecified problems. (CVE-2017-7487)

A double free bug was discovered in the IPv4 stack of the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2017-8890)

Andrey Konovalov discovered an IPv6 out-of-bounds read error in the Linux kernel’s IPv6 stack. A local attacker could cause a denial of service or potentially other unspecified problems. (CVE-2017-9074)

Andrey Konovalov discovered a flaw in the handling of inheritance in the Linux kernel’s IPv6 stack. A local user could exploit this issue to cause a denial of service or possibly other unspecified problems. (CVE-2017-9075)

It was discovered that dccp v6 in the Linux kernel mishandled inheritance. A local attacker could exploit this issue to cause a denial of service or potentially other unspecified problems. (CVE-2017-9076)

It was discovered that the transmission control protocol (tcp) v6 in the Linux kernel mishandled inheritance. A local attacker could exploit this issue to cause a denial of service or potentially other unspecified problems. (CVE-2017-9077)

It was discovered that the IPv6 stack was doing over write consistency check after the data was actually overwritten. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2017-9242)

Affected Cloud Foundry Products and Versions

Severity is high unless otherwise noted.

• Cloud Foundry BOSH stemcells are vulnerable, including:
  • 3263.x versions prior to 3263.28
  • 3312.x versions prior to 3312.29
  • 3363.x versions prior to 3363.26
  • 3421.x versions prior to 3421.9
  • All other stemcells not listed.

Mitigation

OSS users are strongly encouraged to follow one of the mitigations below:

• The Cloud Foundry project recommends upgrading the following BOSH stemcells:
  • Upgrade 3263.x versions prior to 3263.28
  • Upgrade 3312.x versions prior to 3312.29
  • Upgrade 3363.x versions prior to 3363.26
  • Upgrade 3421.x versions prior to 3421.9
  • All other stemcells should be upgraded to the latest version available on bosh.io.

References

• USN-3334-1
• CVE-2017-1000364
• CVE-2017-1000363
• CVE-2017-7487
• CVE-2017-8890
• CVE-2017-9074
• CVE-2017-9075
• CVE-2017-9076
• CVE-2017-9077
• CVE-2017-9242