IMPORTANT ANNOUNCEMENT: This website was decommissioned on July 18, 2022

Posted on July 18, 2022

This site is no longer being updated with new postings. Please visit the UBC IT Status Page at https://status.it.ubc.ca for any new status updates and incident notifications. For operational status of our enterprise-level services, users can now subscribe in multiple ways that now includes push notifications:

  • Email
  • SMS
  • Slack integration
  • Twitter
  • Webhooks
  • RSS feed
  • Custom Embed via Status API

You will be redirected shortly to the Status Page or follow the link below to go there now.

Visit the UBC IT Status Page

 

IMPORTANT ANNOUNCEMENT: This website will be decommissioned on July 18, 2022

Posted on June 20, 2022

The UBC IT Bulletins site will no longer be updated on July 18, 2022 and users will need to visit its replacement, the UBC IT Status Page at https://status.it.ubc.ca, where they can view or subscribe to status updates and incident notifications.

UBC IT Bulletins was kept as a legacy site in order to temporarily maintain RSS feeds and intended to provide users time to switch their subscriptions to the Status Page channels.

Before the decommission date of July 18, 2022, we recommend visitors go to https://status.it.ubc.ca to begin subscribing to the new notifications the Status Page has to offer. For our enterprise-level services, users can now subscribe in multiple ways that now include customizable push notifications:

  • SMS messaging
  • Email notifications
  • Webhooks
  • Twitter feed
  • A general RSS feed
  • Custom Slack notifications
  • Custom embed code via an API

Visit the UBC IT Status Page

Stack Clash Vulnerability – Jun 19, 2017 – 15:30 PT

By Operations Centre on June 14, 2017

Stack Clash Vulnerability

Stack Clash is a vulnerability that affects memory management of Unix-based operating systems. Attackers exploit this vulnerability by corrupting memory by stacking with another memory region in the system and executing an arbitrary code.  These exploits are Local Privilege Escalations where the attacker can exploit the stash vulnerability and obtain full root privileges.

Severity

  • Critical

CVE

  • CVE-2017-1000364
  • CVE-2017-1000365
  • CVE-2017-1000367

 

Impacted Operation Systems

  • Several Unix-based operating systems including:
    • Linux
    • OpenBSD
    • NetBSD
    • FreeBSD
    • Solaris on i386 and amd64

Recommended Actions

Please apply the latest updates and patches immediately if you are an administrator of a multi-user Linux/BSD system.  Other systems can be patched on the monthly cycle.

More Information

https://blog.qualys.com/securitylabs/2017/06/19/the-stack-clash

https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt

Posted in , ,

Visit the UBC IT Website

Archives

RSS Feeds