Severity

High

Vendor

Canonical Ubuntu

Versions Affected

• Canonical Ubuntu 14.04

Description

USN-3265-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.

It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-7374)

Andrey Konovalov discovered an out-of-bounds access in the IPv6 Generic Routing Encapsulation (GRE) tunneling implementation in the Linux kernel. An attacker could use this to possibly expose sensitive information. (CVE-2017-5897)

Andrey Konovalov discovered that the IPv4 implementation in the Linux kernel did not properly handle invalid IP options in some situations. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2017-5970)

Gareth Evans discovered that the shm IPC subsystem in the Linux kernel did not properly restrict mapping page zero. A local privileged attacker could use this to execute arbitrary code. (CVE-2017-5669)

Alexander Popov discovered that a race condition existed in the Stream Control Transmission Protocol (SCTP) implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-5986)

Dmitry Vyukov discovered that the Linux kernel did not properly handle TCP packets with the URG flag. A remote attacker could use this to cause a denial of service. (CVE-2017-6214)

Andrey Konovalov discovered that the LLC subsytem in the Linux kernel did not properly set up a destructor in certain situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-6345)

It was discovered that a race condition existed in the AF_PACKET handling code in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-6346)

Andrey Konovalov discovered that the IP layer in the Linux kernel made improper assumptions about internal data layout when performing checksums. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-6347)

Dmitry Vyukov discovered race conditions in the Infrared (IrDA) subsystem in the Linux kernel. A local attacker could use this to cause a denial of service (deadlock). (CVE-2017-6348)

Affected Cloud Foundry Products and Versions

Severity is high unless otherwise noted.

• Cloud Foundry BOSH stemcells are vulnerable, including:
  • 3151.x versions prior to 3151.16
  • 3263.x versions prior to 3263.24
  • 3312.x versions prior to 3312.24
  • 3363.x versions prior to 3363.20
  • All other stemcells not listed.

Mitigation

OSS users are strongly encouraged to follow one of the mitigations below:

• The Cloud Foundry project recommends upgrading the following BOSH stemcells:
  • Upgrade 3151.x versions to 3151.16 or later
  • Upgrade 3263.x versions to 3263.24 or later
  • Upgrade 3312.x versions to 3312.24 or later
  • Upgrade 3363.x versions to 3363.20 or later
  • All other stemcells should be upgraded to the latest version.

References

• USN-3265-2
• CVE-2017-7374
• CVE-2017-5897
• CVE-2017-5970
• CVE-2017-5669
• CVE-2017-5986
• CVE-2017-6214
• CVE-2017-6345
• CVE-2017-6346
• CVE-2017-6347
• CVE-2017-6348