CVE-2011-2203 in Ubuntu

CVE-2011-2203

Priority

Medium

Description

The hfs_find_init function in the Linux kernel 2.6 allows local users to
cause a denial of service (NULL pointer dereference and Oops) by mounting
an HFS file system with a malformed MDB extent record.

Ubuntu-Description

Clement Lecigne discovered a bug in the HFS filesystem. A local attacker
could exploit this to cause a kernel oops.

References

Bugs

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2203
https://launchpad.net/bugs/899466

Package

Source: linux-ec2 (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.32-342.43)
Ubuntu 10.10 (Maverick Meerkat):	ignored (binary supplied by "linux" now)
Ubuntu 11.04 (Natty Narwhal):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE

Package

Source: linux-lts-backport-oneiric (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (3.0.0-15.25~lucid1)
Ubuntu 10.10 (Maverick Meerkat):	DNE
Ubuntu 11.04 (Natty Narwhal):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE

Package

Source: linux-lts-backport-natty (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.38-13.54~lucid1)
Ubuntu 10.10 (Maverick Meerkat):	DNE
Ubuntu 11.04 (Natty Narwhal):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE

Package

Source: linux-mvl-dove (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	pending (2.6.32-222.40)
Ubuntu 10.10 (Maverick Meerkat):	released (2.6.32-422.40)
Ubuntu 11.04 (Natty Narwhal):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE

Package

Source: linux-lts-backport-maverick (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.35-32.64~lucid1)
Ubuntu 10.10 (Maverick Meerkat):	DNE
Ubuntu 11.04 (Natty Narwhal):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE

Package

Source: linux (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	released (2.6.24-30.98)
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.32-38.82)
Ubuntu 10.10 (Maverick Meerkat):	released (2.6.35-32.64)
Ubuntu 11.04 (Natty Narwhal):	released (2.6.38-13.54)
Ubuntu 11.10 (Oneiric Ocelot):	released (3.0.0-15.24)
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected (3.2.0-1.1)

Patches:

Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Fixed by 434a964daa14b9db083ce20404a4a2add54d037a

Package

Source: linux-ti-omap4 (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 10.10 (Maverick Meerkat):	released (2.6.35-903.29)
Ubuntu 11.04 (Natty Narwhal):	released (2.6.38-1209.19)
Ubuntu 11.10 (Oneiric Ocelot):	released (3.0.0-1206.14)
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected (3.2.0-1401.1)

Package

Source: linux-fsl-imx51 (LP Ubuntu Debian)

Upstream:	released (3.2~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.31-612.32)
Ubuntu 10.10 (Maverick Meerkat):	DNE
Ubuntu 11.04 (Natty Narwhal):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE

More Information

Updated: 2012-02-03 18:14:19 UTC (commit 4799)