Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1502-1
Solution
Please Install the Updated Packages.
Insight
Ken Mixter discovered a format string vulnerability in the LogVHdrMessageVerb function when handling input device names. This could allow a local attacker to cause a denial of service or possibly execute arbitrary code.
The default compiler options for the affected release should reduce the vulnerability to a denial of service.
Affected
xorg-server on Ubuntu 12.04 LTS
Severity
Classification
-
CVE CVE-2012-2118 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities