CVE-2012-4565

Priority
Medium
Description
The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux
kernel before 3.4.19, when the net.ipv4.tcp_congestion_control illinois
setting is enabled, allows local users to cause a denial of service
(divide-by-zero error and OOPS) by reading TCP stats.
Ubuntu-Description
Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois
congestion control algorithm. A local attacker could use this to cause a
denial of service.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4565
http://www.openwall.com/lists/oss-security/2012/10/31/4
http://thread.gmane.org/gmane.linux.network/247871
http://www.ubuntu.com/usn/usn-1644-1
http://www.ubuntu.com/usn/usn-1645-1
http://www.ubuntu.com/usn/usn-1646-1
http://www.ubuntu.com/usn/usn-1647-1
http://www.ubuntu.com/usn/usn-1648-1
http://www.ubuntu.com/usn/usn-1649-1
http://www.ubuntu.com/usn/usn-1650-1
http://www.ubuntu.com/usn/usn-1651-1
http://www.ubuntu.com/usn/usn-1652-1
http://www.ubuntu.com/usn/usn-1653-1
http://www.ubuntu.com/usn/usn-1704-1
Bugs
https://launchpad.net/bugs/1077091
Package
Source: linux-armadaxp (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1611.16)
Ubuntu 12.10 (Quantal Quetzal):released (3.5.0-1605.7)
Ubuntu 13.04 (Raring Ringtail):not-affected
Package
Source: linux-ec2 (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-350.57)
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Package
Source: linux-lts-backport-oneiric (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (3.0.0-28.45~lucid1)
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Package
Source: linux-linaro-shared (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):ignored (abandoned)
Package
Source: linux-linaro-vexpress (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):ignored (abandoned)
Package
Source: linux-qcm-msm (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (abandoned)
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):ignored (abandoned)
Package
Source: linux-lts-quantal (LP Ubuntu Debian)
Upstream:DNE
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.5.0-19.30~precise1)
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Patches:
Package
Source: linux-mvl-dove (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Package
Source: linux-lts-backport-maverick (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Package
Source: linux-2.6 (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):released (2.6.24-32.106)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-45.100)
Ubuntu 11.10 (Oneiric Ocelot):released (3.0.0-28.45)
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-34.53)
Ubuntu 12.10 (Quantal Quetzal):released (3.5.0-19.30)
Ubuntu 13.04 (Raring Ringtail):not-affected (3.7.0-0.2)
Patches:
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by 8f363b77ee4fbf7c3bbcf5ec2c5ca482d396d664
Package
Source: linux-ti-omap4 (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):released (3.0.0-1218.31)
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1422.29)
Ubuntu 12.10 (Quantal Quetzal):released (3.5.0-19.30)
Ubuntu 13.04 (Raring Ringtail):not-affected
Package
Source: linux-linaro-omap (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):ignored (abandoned)
Package
Source: linux-fsl-imx51 (LP Ubuntu Debian)
Upstream:released (3.7~rc4)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life, does not affect buildd)
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
More Information

Valid XHTML 1.0 Strict

Updated: 2013-02-12 21:14:43 UTC (commit 6419)