** Also affects: linux (Ubuntu Trusty) Importance: Undecided Status: New
** Also affects: linux-fsl-imx51 (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-mvl-dove (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-ec2 (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-ti-omap4 (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-lts-backport-maverick (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-lts-backport-natty (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-lts-backport-oneiric (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-armadaxp (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-lts-quantal (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-lts-raring (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-lts-trusty (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-fsl-imx51 (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-mvl-dove (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-ec2 (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-ti-omap4 (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-lts-backport-maverick (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-lts-backport-natty (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-lts-backport-oneiric (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-armadaxp (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-lts-quantal (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-lts-raring (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux-lts-trusty (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: linux (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-fsl-imx51 (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-mvl-dove (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-ec2 (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-ti-omap4 (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-lts-backport-maverick (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-lts-backport-natty (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-lts-backport-oneiric (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-armadaxp (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-lts-quantal (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-lts-raring (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux-lts-trusty (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: linux (Ubuntu Wily) Importance: High Status: Fix Released ** Also affects: linux-fsl-imx51 (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-mvl-dove (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-ec2 (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-ti-omap4 (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-lts-backport-maverick (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-lts-backport-natty (Ubuntu Wily) Importance: Undecided Status: Invalid ** Also affects: linux-lts-backport-oneiric (Ubuntu Wily) Importance: Undecided Status: Invalid ** Also affects: linux-armadaxp (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-lts-quantal (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-lts-raring (Ubuntu Wily) Importance: High Status: Invalid ** Also affects: linux-lts-trusty (Ubuntu Wily) Importance: Undecided Status: New ** No longer affects: linux-lts-trusty (Ubuntu Lucid) ** No longer affects: linux-lts-trusty (Ubuntu Quantal) ** No longer affects: linux-lts-trusty (Ubuntu Raring) ** No longer affects: linux-lts-trusty (Ubuntu Saucy) ** No longer affects: linux-armadaxp (Ubuntu Lucid) ** No longer affects: linux-armadaxp (Ubuntu Quantal) ** No longer affects: linux-armadaxp (Ubuntu Raring) ** No longer affects: linux-armadaxp (Ubuntu Saucy) ** No longer affects: linux-ec2 (Ubuntu Lucid) ** No longer affects: linux-ec2 (Ubuntu Quantal) ** No longer affects: linux-ec2 (Ubuntu Raring) ** No longer affects: linux-ec2 (Ubuntu Saucy) ** No longer affects: linux-goldfish (Ubuntu Lucid) ** No longer affects: linux-goldfish (Ubuntu Quantal) ** No longer affects: linux-goldfish (Ubuntu Raring) ** No longer affects: linux-goldfish (Ubuntu Saucy) ** No longer affects: linux-lts-saucy (Ubuntu Lucid) ** No longer affects: linux-lts-saucy (Ubuntu Quantal) ** No longer affects: linux-lts-saucy (Ubuntu Raring) ** No longer affects: linux-lts-saucy (Ubuntu Saucy) ** No longer affects: linux-lts-quantal (Ubuntu Lucid) ** No longer affects: linux-lts-quantal (Ubuntu Quantal) ** No longer affects: linux-lts-quantal (Ubuntu Raring) ** No longer affects: linux-lts-quantal (Ubuntu Saucy) ** No longer affects: linux-mvl-dove (Ubuntu Lucid) ** No longer affects: linux-mvl-dove (Ubuntu Quantal) ** No longer affects: linux-mvl-dove (Ubuntu Raring) ** No longer affects: linux-mvl-dove (Ubuntu Saucy) ** No longer affects: linux-ti-omap4 (Ubuntu Lucid) ** No longer affects: linux-ti-omap4 (Ubuntu Quantal) ** No longer affects: linux-ti-omap4 (Ubuntu Raring) ** No longer affects: linux-ti-omap4 (Ubuntu Saucy) ** No longer affects: linux-lts-vivid (Ubuntu Lucid) ** No longer affects: linux-lts-vivid (Ubuntu Quantal) ** No longer affects: linux-lts-vivid (Ubuntu Raring) ** No longer affects: linux-lts-vivid (Ubuntu Saucy) ** No longer affects: linux (Ubuntu Lucid) ** No longer affects: linux (Ubuntu Quantal) ** No longer affects: linux (Ubuntu Raring) ** No longer affects: linux (Ubuntu Saucy) ** No longer affects: linux-mako (Ubuntu Lucid) ** No longer affects: linux-mako (Ubuntu Quantal) ** No longer affects: linux-mako (Ubuntu Raring) ** No longer affects: linux-mako (Ubuntu Saucy) ** No longer affects: linux-fsl-imx51 (Ubuntu Lucid) ** No longer affects: linux-fsl-imx51 (Ubuntu Quantal) ** No longer affects: linux-fsl-imx51 (Ubuntu Raring) ** No longer affects: linux-fsl-imx51 (Ubuntu Saucy) ** No longer affects: linux-lts-utopic (Ubuntu Lucid) ** No longer affects: linux-lts-utopic (Ubuntu Quantal) ** No longer affects: linux-lts-utopic (Ubuntu Raring) ** No longer affects: linux-lts-utopic (Ubuntu Saucy) ** No longer affects: linux-flo (Ubuntu Lucid) ** No longer affects: linux-flo (Ubuntu Quantal) ** No longer affects: linux-flo (Ubuntu Raring) ** No longer affects: linux-flo (Ubuntu Saucy) ** No longer affects: linux-lts-raring (Ubuntu Lucid) ** No longer affects: linux-lts-raring (Ubuntu Quantal) ** No longer affects: linux-lts-raring (Ubuntu Raring) ** No longer affects: linux-lts-raring (Ubuntu Saucy) ** No longer affects: linux-manta (Ubuntu Lucid) ** No longer affects: linux-manta (Ubuntu Quantal) ** No longer affects: linux-manta (Ubuntu Raring) ** No longer affects: linux-manta (Ubuntu Saucy) ** Changed in: linux-lts-trusty (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-lts-trusty (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-lts-trusty (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-lts-trusty (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-lts-trusty (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-lts-trusty (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-lts-trusty (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-lts-trusty (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-lts-trusty (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-lts-trusty (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-lts-quantal (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-lts-quantal (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-lts-quantal (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-lts-quantal (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-lts-quantal (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-lts-quantal (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-ti-omap4 (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-ti-omap4 (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-ti-omap4 (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-ti-omap4 (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-ti-omap4 (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-ti-omap4 (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-lts-raring (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-lts-raring (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-lts-raring (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-lts-raring (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-lts-raring (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-lts-raring (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-armadaxp (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-armadaxp (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-armadaxp (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-armadaxp (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-armadaxp (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-armadaxp (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-mvl-dove (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-mvl-dove (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-mvl-dove (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-mvl-dove (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-mvl-dove (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-mvl-dove (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-manta (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-manta (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-manta (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-manta (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-manta (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-manta (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-manta (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-manta (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-manta (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-manta (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-ec2 (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-ec2 (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-ec2 (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-ec2 (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-ec2 (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-ec2 (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-lts-vivid (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-lts-vivid (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-lts-vivid (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-lts-vivid (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-lts-vivid (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-lts-vivid (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-lts-vivid (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-lts-vivid (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-lts-vivid (Ubuntu Trusty) Status: New => Fix Committed ** Changed in: linux-lts-vivid (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-mako (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-mako (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-mako (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-mako (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-mako (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-mako (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-mako (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-mako (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-mako (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-mako (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-fsl-imx51 (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-fsl-imx51 (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-fsl-imx51 (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-fsl-imx51 (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-fsl-imx51 (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-fsl-imx51 (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-lts-utopic (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-lts-utopic (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-lts-utopic (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-lts-utopic (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-lts-utopic (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-lts-utopic (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-lts-utopic (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-lts-utopic (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-lts-utopic (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-lts-utopic (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-goldfish (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-goldfish (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-goldfish (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-goldfish (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-goldfish (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-goldfish (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-goldfish (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-goldfish (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-goldfish (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-goldfish (Ubuntu Vivid) Importance: Undecided => High ** Changed in: linux-flo (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-flo (Ubuntu Precise) Importance: Undecided => High ** Changed in: linux-flo (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-flo (Ubuntu Trusty) Importance: Undecided => High ** Changed in: linux-flo (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-flo (Ubuntu Wily) Importance: Undecided => High ** Changed in: linux-flo (Ubuntu Utopic) Status: New => Invalid ** Changed in: linux-flo (Ubuntu Utopic) Importance: Undecided => High ** Changed in: linux-flo (Ubuntu Vivid) Status: New => Invalid ** Changed in: linux-flo (Ubuntu Vivid) Importance: Undecided => High ** Description changed: Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet. A reproduction case requires patching open-iscsi to send overly large keys. Performing discovery in a loop will Oops the remote server. Attached is a proposed fix, and the patch I used in open-iscsi to trigger it. Thanks in advance for your cooperation in coordinating a fix for this issue, - Break-Fix: e48354ce078c079996f89d715dfa44814b4eba01 - cea4dcfdad926a27a18e188720efe0f2c9403456 + Break-Fix: e48354ce078c079996f89d715dfa44814b4eba01 local-2013-2850 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-armadaxp in Ubuntu. https://bugs.launchpad.net/bugs/1185990 Title: CVE-2013-2850 Status in linux package in Ubuntu: Fix Released Status in linux-armadaxp package in Ubuntu: Invalid Status in linux-ec2 package in Ubuntu: Invalid Status in linux-flo package in Ubuntu: Invalid Status in linux-fsl-imx51 package in Ubuntu: Invalid Status in linux-goldfish package in Ubuntu: Invalid Status in linux-lts-backport-maverick package in Ubuntu: Invalid Status in linux-lts-backport-natty package in Ubuntu: Invalid Status in linux-lts-backport-oneiric package in Ubuntu: Invalid Status in linux-lts-quantal package in Ubuntu: Invalid Status in linux-lts-raring package in Ubuntu: Invalid Status in linux-lts-saucy package in Ubuntu: New Status in linux-lts-trusty package in Ubuntu: Invalid Status in linux-lts-utopic package in Ubuntu: Invalid Status in linux-lts-vivid package in Ubuntu: Invalid Status in linux-mako package in Ubuntu: Invalid Status in linux-manta package in Ubuntu: Invalid Status in linux-mvl-dove package in Ubuntu: Invalid Status in linux-ti-omap4 package in Ubuntu: Invalid Status in linux-lts-backport-maverick source package in Lucid: Invalid Status in linux-lts-backport-natty source package in Lucid: Invalid Status in linux-lts-backport-oneiric source package in Lucid: Invalid Status in linux source package in Precise: Fix Released Status in linux-armadaxp source package in Precise: Fix Released Status in linux-ec2 source package in Precise: Invalid Status in linux-flo source package in Precise: Invalid Status in linux-fsl-imx51 source package in Precise: Invalid Status in linux-goldfish source package in Precise: Invalid Status in linux-lts-backport-maverick source package in Precise: Invalid Status in linux-lts-backport-natty source package in Precise: Invalid Status in linux-lts-backport-oneiric source package in Precise: Invalid Status in linux-lts-quantal source package in Precise: Fix Released Status in linux-lts-raring source package in Precise: Fix Released Status in linux-lts-saucy source package in Precise: New Status in linux-lts-trusty source package in Precise: Invalid Status in linux-lts-utopic source package in Precise: Invalid Status in linux-lts-vivid source package in Precise: Invalid Status in linux-mako source package in Precise: Invalid Status in linux-manta source package in Precise: Invalid Status in linux-mvl-dove source package in Precise: Invalid Status in linux-ti-omap4 source package in Precise: Fix Released Status in linux-lts-backport-maverick source package in Quantal: Invalid Status in linux-lts-backport-natty source package in Quantal: Invalid Status in linux-lts-backport-oneiric source package in Quantal: Invalid Status in linux-lts-backport-maverick source package in Raring: Invalid Status in linux-lts-backport-natty source package in Raring: Invalid Status in linux-lts-backport-oneiric source package in Raring: Invalid Status in linux-lts-backport-maverick source package in Saucy: Invalid Status in linux-lts-backport-natty source package in Saucy: Invalid Status in linux-lts-backport-oneiric source package in Saucy: Invalid Status in linux source package in Trusty: Invalid Status in linux-armadaxp source package in Trusty: Invalid Status in linux-ec2 source package in Trusty: Invalid Status in linux-flo source package in Trusty: Invalid Status in linux-fsl-imx51 source package in Trusty: Invalid Status in linux-goldfish source package in Trusty: Invalid Status in linux-lts-backport-maverick source package in Trusty: New Status in linux-lts-backport-natty source package in Trusty: New Status in linux-lts-backport-oneiric source package in Trusty: New Status in linux-lts-quantal source package in Trusty: Invalid Status in linux-lts-raring source package in Trusty: Invalid Status in linux-lts-saucy source package in Trusty: New Status in linux-lts-trusty source package in Trusty: Invalid Status in linux-lts-utopic source package in Trusty: Invalid Status in linux-lts-vivid source package in Trusty: Fix Committed Status in linux-mako source package in Trusty: Invalid Status in linux-manta source package in Trusty: Invalid Status in linux-mvl-dove source package in Trusty: Invalid Status in linux-ti-omap4 source package in Trusty: Invalid Status in linux source package in Utopic: Invalid Status in linux-armadaxp source package in Utopic: Invalid Status in linux-ec2 source package in Utopic: Invalid Status in linux-flo source package in Utopic: Invalid Status in linux-fsl-imx51 source package in Utopic: Invalid Status in linux-goldfish source package in Utopic: Invalid Status in linux-lts-backport-maverick source package in Utopic: New Status in linux-lts-backport-natty source package in Utopic: New Status in linux-lts-backport-oneiric source package in Utopic: New Status in linux-lts-quantal source package in Utopic: Invalid Status in linux-lts-raring source package in Utopic: Invalid Status in linux-lts-saucy source package in Utopic: New Status in linux-lts-trusty source package in Utopic: Invalid Status in linux-lts-utopic source package in Utopic: Invalid Status in linux-lts-vivid source package in Utopic: Invalid Status in linux-mako source package in Utopic: Invalid Status in linux-manta source package in Utopic: Invalid Status in linux-mvl-dove source package in Utopic: Invalid Status in linux-ti-omap4 source package in Utopic: Invalid Status in linux source package in Vivid: Invalid Status in linux-armadaxp source package in Vivid: Invalid Status in linux-ec2 source package in Vivid: Invalid Status in linux-flo source package in Vivid: Invalid Status in linux-fsl-imx51 source package in Vivid: Invalid Status in linux-goldfish source package in Vivid: Invalid Status in linux-lts-backport-maverick source package in Vivid: New Status in linux-lts-backport-natty source package in Vivid: New Status in linux-lts-backport-oneiric source package in Vivid: New Status in linux-lts-quantal source package in Vivid: Invalid Status in linux-lts-raring source package in Vivid: Invalid Status in linux-lts-saucy source package in Vivid: New Status in linux-lts-trusty source package in Vivid: Invalid Status in linux-lts-utopic source package in Vivid: Invalid Status in linux-lts-vivid source package in Vivid: Invalid Status in linux-mako source package in Vivid: Invalid Status in linux-manta source package in Vivid: Invalid Status in linux-mvl-dove source package in Vivid: Invalid Status in linux-ti-omap4 source package in Vivid: Invalid Status in linux source package in Wily: Fix Released Status in linux-armadaxp source package in Wily: Invalid Status in linux-ec2 source package in Wily: Invalid Status in linux-flo source package in Wily: Invalid Status in linux-fsl-imx51 source package in Wily: Invalid Status in linux-goldfish source package in Wily: Invalid Status in linux-lts-backport-maverick source package in Wily: Invalid Status in linux-lts-backport-natty source package in Wily: Invalid Status in linux-lts-backport-oneiric source package in Wily: Invalid Status in linux-lts-quantal source package in Wily: Invalid Status in linux-lts-raring source package in Wily: Invalid Status in linux-lts-saucy source package in Wily: New Status in linux-lts-trusty source package in Wily: Invalid Status in linux-lts-utopic source package in Wily: Invalid Status in linux-lts-vivid source package in Wily: Invalid Status in linux-mako source package in Wily: Invalid Status in linux-manta source package in Wily: Invalid Status in linux-mvl-dove source package in Wily: Invalid Status in linux-ti-omap4 source package in Wily: Invalid Bug description: Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet. A reproduction case requires patching open-iscsi to send overly large keys. Performing discovery in a loop will Oops the remote server. Attached is a proposed fix, and the patch I used in open-iscsi to trigger it. Thanks in advance for your cooperation in coordinating a fix for this issue, Break-Fix: e48354ce078c079996f89d715dfa44814b4eba01 local-2013-2850 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1185990/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp