Professional OVAL Repository
[Eng]
[Rus]
[Sign-In]
OVAL
Search
Categories
RedCheck
About
OVAL Definitions
OVAL Items
FSTEC Data Bank Information Security Threats
NKCKI
EOL (End Of Life)
Linux Security Advisories
Mozilla Foundation Security Advisory
IBM
VMware
Cisco
Check Point Software Technologies
Apache
Solaris
FreeBSD
Development
GitHub Enterprise
Google Chrome Security Advisories
Oracle Security Advisories
Adobe Security Advisories
OpenSSL Security Advisories
Microsoft
CVE
CWE
CPE
Latest Updates
OS ROSA
ALT Linux
Astra Linux SE 1.5
Astra Linux SE 1.6
RED OS
DSA (Debian Security Advisory) Patсh Statistics
DSA (Debian Security Advisory) Patсh Feed
DSA (Debian Security Advisory) Vulnerability Feed
DLA (Debian Security Advisory) Patсh Statistics
DLA (Debian Security Advisory) Patсh Feed
DLA (Debian Security Advisory) Vulnerability Feed
ALT Linux (Security Bulletins) Patсh Statistics
ALT Linux (Security Bulletins) Patсh Feed
ALT Linux (Security Bulletins) Vulnerability Feed
RED OS (Security Bulletins) Patсh Statistics
RED OS (Security Bulletins) Patсh Feed
RED OS (Security Bulletins) Vulnerability Feed
USN (Ubuntu Security Notice) Patсh Statistics
USN (Ubuntu Security Notice) Patсh Feed
USN (Ubuntu Security Notice) Vulnerability Feed
RHSA (RedHat Security Advisory) Patсh Statistics
RHSA (RedHat Security Advisory) Patсh Feed
RHSA (RedHat Security Advisory) Vulnerability Feed
ELSA (Oracle Linux Security Advisory) Patсh Statistics
ELSA (Oracle Linux Security Advisory) Patсh Feed
ELSA (Oracle Linux Security Advisory) Vulnerability Feed
SUSE (SUSE Security Advisories) Patсh Statistics
SUSE (SUSE Security Advisories) Patсh Feed
SUSE (SUSE Security Advisories) Vulnerability Feed
openSUSE (openSUSE Security Advisories) Patсh Statistics
openSUSE (openSUSE Security Advisories) Patсh Feed
openSUSE (openSUSE Security Advisories) Vulnerability Feed
Amazon Linux AMI (Security Bulletins) Patсh Statistics
Amazon Linux AMI (Security Bulletins) Patсh Feed
Amazon Linux AMI (Security Bulletins) Vulnerability Feed
Mageia Linux (Security Bulletins) Patсh Statistics
Mageia Linux (Security Bulletins) Patсh Feed
Mageia Linux (Security Bulletins) Vulnerability Feed
OS ROSA SX COBALT 1.0
OS ROSA DX COBALT 1.0
ROSA 7.3 (Security Advisories) Patсh Statistics
ROSA 7.3 (Security Advisories) Patсh Feed
ROSA 7.3 (Security Advisories) Vulnerability Feed
ALT Linux SPT 6.0
ALT Linux SPT 7.0
ALT 8 SP
ALT 9
RED OS Murom 7.1
RED OS Murom 7.2
IBM DB2
VMware Vulnerabilities Advisory (VMSA)
VMware vCenter Patch Advisories
VMware ESXi Patch Advisories
VMware NSX Patches
VMware NSX Vulnerabilities
VMware Photon OS 1.0 Patches
VMware Photon OS 1.0 Vulnerabilities
VMware Photon OS 2.0 Patches
VMware Photon OS 2.0 Vulnerabilities
Cisco ASA
Cisco IOS/NX-OS Advisory
Cisco NX-OS Vulnerabilities
Check Point Gaia
Apache Tomcat Advisories
Apache Tomcat Server
Apache HTTP Server
Python
Node.js
RubyGems
Qt
Microsoft Security Bulletin
Microsoft Knowledge Base Article
Microsoft SharePoint
Microsoft SharePoint Foundation 2013
Microsoft SharePoint Server 2013
Microsoft SharePoint Server 2016
About OVALdb
User manual
Pricing
Contact us
OVAL Definitions
>
OVAL Definition Details
Id
oval:com.altx-soft.nix:def:19097
[Rus]
Version
5
Class
patch
ALTXid
174028
Language
English
Severity
High
Title
USN-3619-2 -- Linux kernel (Xenial HWE) vulnerabilities
Description
Several security issues were fixed in the Linux kernel.
Family
unix
Platform
Linux Mint 17
Ubuntu 14.04
Product
linux-aws
linux-lts-xenial
Reference
VENDOR: USN-3619-2
VENDOR: USN-3619-2
Id:
USN-3619-2
Reference:
https://usn.ubuntu.com/3619-2/
CVE: CVE-2017-16995
CVE: CVE-2017-16995
Id:
CVE-2017-16995
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16995
Comment
: The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
DSA-4073 (DEBIAN)
https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f (MISC)
https://bugs.chromium.org/p/project-zero/issues/detail?id=1454 (MISC)
http://openwall.com/lists/oss-security/2017/12/21/2 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f (MISC)
102288 (BID)
USN-3523-2 (UBUNTU)
44298 (EXPLOIT-DB)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3633-1 (UBUNTU)
45010 (EXPLOIT-DB)
45058 (EXPLOIT-DB)
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb (CONFIRM)
CVE: CVE-2017-0861
CVE: CVE-2017-0861
Id:
CVE-2017-0861
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0861
Comment
: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
416 (Use After Free)
References:
https://source.android.com/security/bulletin/pixel/2017-11-01 (CONFIRM)
https://security-tracker.debian.org/tracker/CVE-2017-0861 (CONFIRM)
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229 (CONFIRM)
[secure-testing-commits] 20171206 r58306 - data/CVE (MLIST)
USN-3583-2 (UBUNTU)
USN-3583-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
RHSA-2018:2390 (REDHAT)
RHSA-2018:3096 (REDHAT)
RHSA-2018:3083 (REDHAT)
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 (CONFIRM)
102329 (BID)
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html (MISC)
RHSA-2020:0036 (REDHAT)
https://www.oracle.com/security-alerts/cpujul2020.html (MISC)
CVE: CVE-2017-1000407
CVE: CVE-2017-1000407
Id:
CVE-2017-1000407
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000407
Comment
: The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.
CVSSv2 Score:
6.1
Access vector:
ADJACENT_NETWORK
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE:
754 (Improper Check for Unusual or Exceptional Conditions)
References:
[oss-security] 20171204 CVE-2017-1000407 Kernel: KVM: DoS via write flood to I/O port 0x80 (MLIST)
102038 (BID)
RHSA-2018:0676 (REDHAT)
RHSA-2018:1062 (REDHAT)
RHSA-2019:1170 (REDHAT)
https://access.redhat.com/security/cve/cve-2017-1000407 (CONFIRM)
[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update (MLIST)
USN-3583-1 (UBUNTU)
USN-3583-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
DSA-4073 (DEBIAN)
DSA-4082 (DEBIAN)
[kvm] 20171201 [PATCH 1/2] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (MLIST)
CVE: CVE-2017-11472
CVE: CVE-2017-11472
Id:
CVE-2017-11472
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11472
Comment
: The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
CVSSv2 Score:
3.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:N
CVSSv3 Score:
7.1
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
NONE
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE:
755 (Improper Handling of Exceptional Conditions)
References:
https://github.com/torvalds/linux/commit/3b2d69114fefa474fca542e51119036dceb4aa6f (CONFIRM)
https://github.com/acpica/acpica/commit/a23325b2e583556eae88ed3f764e457786bf4df6 (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3b2d69114fefa474fca542e51119036dceb4aa6f (CONFIRM)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-15129
CVE: CVE-2017-15129
Id:
CVE-2017-15129
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15129
Comment
: A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.
CVSSv2 Score:
4.9
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSSv3 Score:
4.7
Attack vector:
LOCAL
Attack complexity:
HIGH
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11 (MISC)
https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0 (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=1531174 (MISC)
https://access.redhat.com/security/cve/CVE-2017-15129 (MISC)
http://seclists.org/oss-sec/2018/q1/7 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0 (MISC)
https://marc.info/?t=151370468900001&r=1&w=2 (MISC)
https://marc.info/?l=linux-netdev&m=151370451121029&w=2 (MISC)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:0654 (REDHAT)
RHSA-2018:1062 (REDHAT)
RHSA-2018:0676 (REDHAT)
USN-3632-1 (UBUNTU)
102485 (BID)
RHSA-2019:1946 (REDHAT)
CVE: CVE-2017-16528
CVE: CVE-2017-16528
Id:
CVE-2017-16528
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16528
Comment
: sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
416 (Use After Free)
References:
https://groups.google.com/d/msg/syzkaller/kuZzDHGkQu8/5du20rZEAAAJ (MISC)
https://github.com/torvalds/linux/commit/fc27fe7e8deef2f37cba3f2be2d52b6ca5eb9d57 (MISC)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
CVE: CVE-2017-16532
CVE: CVE-2017-16532
Id:
CVE-2017-16532
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16532
Comment
: The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://groups.google.com/d/msg/syzkaller/l3870gs3LhA/y79DYQdFBAAJ (MISC)
https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8 (MISC)
[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update (MLIST)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16536
CVE: CVE-2017-16536
Id:
CVE-2017-16536
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16536
Comment
: The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://patchwork.kernel.org/patch/9963527/ (MISC)
https://groups.google.com/d/msg/syzkaller/WlUAVfDvpRk/1V1xuEA4AgAJ (MISC)
[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update (MLIST)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16537
CVE: CVE-2017-16537
Id:
CVE-2017-16537
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16537
Comment
: The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://patchwork.kernel.org/patch/9994017/ (MISC)
https://groups.google.com/d/msg/syzkaller/bBFN8imrjjo/-5jCl8EiCQAJ (MISC)
[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update (MLIST)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16645
CVE: CVE-2017-16645
Id:
CVE-2017-16645
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16645
Comment
: The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
125 (Out-of-bounds Read)
References:
https://groups.google.com/d/msg/syzkaller/q6jjr1OhqO8/WcA99AVFBAAJ (MISC)
https://github.com/torvalds/linux/commit/ea04efee7635c9120d015dcdeeeb6988130cb67a (MISC)
101768 (BID)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16646
CVE: CVE-2017-16646
Id:
CVE-2017-16646
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16646
Comment
: drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://patchwork.linuxtv.org/patch/45291/ (MISC)
https://groups.google.com/d/msg/syzkaller/-d6ilzbVu_g/OBy8_62mAwAJ (MISC)
101846 (BID)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
CVE: CVE-2017-16649
CVE: CVE-2017-16649
Id:
CVE-2017-16649
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16649
Comment
: The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
369 (Divide By Zero)
References:
https://patchwork.ozlabs.org/patch/834771/ (MISC)
https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ (MISC)
101761 (BID)
[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update (MLIST)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3822-2 (UBUNTU)
USN-3822-1 (UBUNTU)
CVE: CVE-2017-16650
CVE: CVE-2017-16650
Id:
CVE-2017-16650
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16650
Comment
: The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
369 (Divide By Zero)
References:
https://patchwork.ozlabs.org/patch/834770/ (MISC)
https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ (MISC)
101791 (BID)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16911
CVE: CVE-2017-16911
Id:
CVE-2017-16911
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16911
Comment
: The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.
CVSSv2 Score:
1.9
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:P/I:N/A:N
CVSSv3 Score:
4.7
Attack vector:
LOCAL
Attack complexity:
HIGH
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
NONE
Availability impact:
NONE
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://www.spinics.net/lists/linux-usb/msg163480.html (MISC)
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/ (MISC)
https://secuniaresearch.flexerasoftware.com/advisories/80454/ (MISC)
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 (MISC)
102156 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16912
CVE: CVE-2017-16912
Id:
CVE-2017-16912
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16912
Comment
: The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.
CVSSv2 Score:
7.1
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.9
Attack vector:
NETWORK
Attack complexity:
HIGH
Privileges required:
NONE
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE:
125 (Out-of-bounds Read)
References:
https://www.spinics.net/lists/linux-usb/msg163480.html (MISC)
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ (MISC)
https://secuniaresearch.flexerasoftware.com/advisories/77000/ (MISC)
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=635f545a7e8be7596b9b2b6a43cab6bbd5a88e43 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 (MISC)
102150 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16913
CVE: CVE-2017-16913
Id:
CVE-2017-16913
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16913
Comment
: The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.
CVSSv2 Score:
7.1
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.9
Attack vector:
NETWORK
Attack complexity:
HIGH
Privileges required:
NONE
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE:
119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
References:
https://www.spinics.net/lists/linux-usb/msg163480.html (MISC)
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ (MISC)
https://secuniaresearch.flexerasoftware.com/advisories/80601/ (MISC)
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=c6688ef9f29762e65bce325ef4acd6c675806366 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 (MISC)
102150 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16914
CVE: CVE-2017-16914
Id:
CVE-2017-16914
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16914
Comment
: The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.
CVSSv2 Score:
7.1
Access vector:
NETWORK
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.9
Attack vector:
NETWORK
Attack complexity:
HIGH
Privileges required:
NONE
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://www.spinics.net/lists/linux-usb/msg163480.html (MISC)
https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ (MISC)
https://secuniaresearch.flexerasoftware.com/advisories/80722/ (MISC)
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=be6123df1ea8f01ee2f896a16c2b7be3e4557a5a (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.107 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 (MISC)
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49 (MISC)
102150 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3754-1 (UBUNTU)
CVE: CVE-2017-16994
CVE: CVE-2017-16994
Id:
CVE-2017-16994
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16994
Comment
: The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
NONE
Availability impact:
NONE
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c (CONFIRM)
https://bugs.chromium.org/p/project-zero/issues/detail?id=1431 (CONFIRM)
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2 (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c (CONFIRM)
101969 (BID)
43178 (EXPLOIT-DB)
RHSA-2018:0502 (REDHAT)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
CVE: CVE-2017-17448
CVE: CVE-2017-17448
Id:
CVE-2017-17448
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17448
Comment
: net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
862 (Missing Authorization)
References:
https://patchwork.kernel.org/patch/10089373/ (MISC)
102117 (BID)
DSA-4073 (DEBIAN)
DSA-4082 (DEBIAN)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3620-2 (UBUNTU)
USN-3620-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:0654 (REDHAT)
RHSA-2018:1062 (REDHAT)
RHSA-2018:0676 (REDHAT)
USN-3632-1 (UBUNTU)
CVE: CVE-2017-17449
CVE: CVE-2017-17449
Id:
CVE-2017-17449
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17449
Comment
: The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
CVSSv2 Score:
1.9
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:P/I:N/A:N
CVSSv3 Score:
4.7
Attack vector:
LOCAL
Attack complexity:
HIGH
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
NONE
Availability impact:
NONE
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE:
200 (Information Exposure)
References:
https://lkml.org/lkml/2017/12/5/950 (MISC)
102122 (BID)
DSA-4073 (DEBIAN)
DSA-4082 (DEBIAN)
https://source.android.com/security/bulletin/pixel/2018-04-01 (CONFIRM)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:0654 (REDHAT)
RHSA-2018:1062 (REDHAT)
RHSA-2018:0676 (REDHAT)
RHSA-2018:1170 (REDHAT)
RHSA-2018:1130 (REDHAT)
USN-3655-2 (UBUNTU)
USN-3653-2 (UBUNTU)
USN-3653-1 (UBUNTU)
USN-3657-1 (UBUNTU)
USN-3655-1 (UBUNTU)
CVE: CVE-2017-17450
CVE: CVE-2017-17450
Id:
CVE-2017-17450
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17450
Comment
: net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
862 (Missing Authorization)
References:
https://lkml.org/lkml/2017/12/5/982 (MISC)
102110 (BID)
DSA-4073 (DEBIAN)
SUSE-SU-2018:0011 (SUSE)
DSA-4082 (DEBIAN)
USN-3583-2 (UBUNTU)
USN-3583-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
CVE: CVE-2017-17558
CVE: CVE-2017-17558
Id:
CVE-2017-17558
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17558
Comment
: The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
6.6
Attack vector:
PHYSICAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
787 (Out-of-bounds Write)
References:
https://www.spinics.net/lists/linux-usb/msg163644.html (MISC)
http://openwall.com/lists/oss-security/2017/12/12/7 (MISC)
DSA-4073 (DEBIAN)
SUSE-SU-2018:0011 (SUSE)
DSA-4082 (DEBIAN)
[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update (MLIST)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:1062 (REDHAT)
RHSA-2018:0676 (REDHAT)
USN-3754-1 (UBUNTU)
RHSA-2019:1170 (REDHAT)
RHSA-2019:1190 (REDHAT)
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html (MISC)
CVE: CVE-2017-17741
CVE: CVE-2017-17741
Id:
CVE-2017-17741
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17741
Comment
: The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
NONE
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSSv3 Score:
6.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
CHANGED
Confidentiality impact:
HIGH
Integrity impact:
NONE
Availability impact:
NONE
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE:
125 (Out-of-bounds Read)
References:
https://www.spinics.net/lists/kvm/msg160796.html (MISC)
DSA-4073 (DEBIAN)
DSA-4082 (DEBIAN)
[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update (MLIST)
102227 (BID)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3620-2 (UBUNTU)
USN-3620-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
CVE: CVE-2017-17805
CVE: CVE-2017-17805
Id:
CVE-2017-17805
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17805
Comment
: The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
20 (Improper Input Validation)
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 (CONFIRM)
https://github.com/torvalds/linux/commit/ecaaab5649781c5a0effdaf298a925063020500e (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ecaaab5649781c5a0effdaf298a925063020500e (CONFIRM)
DSA-4073 (DEBIAN)
102291 (BID)
openSUSE-SU-2018:0023 (SUSE)
openSUSE-SU-2018:0022 (SUSE)
SUSE-SU-2018:0012 (SUSE)
SUSE-SU-2018:0011 (SUSE)
SUSE-SU-2018:0010 (SUSE)
DSA-4082 (DEBIAN)
[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update (MLIST)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3620-2 (UBUNTU)
USN-3620-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
RHSA-2018:3096 (REDHAT)
RHSA-2018:3083 (REDHAT)
RHSA-2018:2948 (REDHAT)
RHSA-2019:2473 (REDHAT)
CVE: CVE-2017-17806
CVE: CVE-2017-17806
Id:
CVE-2017-17806
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17806
Comment
: The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
787 (Out-of-bounds Write)
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 (CONFIRM)
https://github.com/torvalds/linux/commit/af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1 (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af3ff8045bbf3e32f1a448542e73abb4c8ceb6f1 (CONFIRM)
DSA-4073 (DEBIAN)
102293 (BID)
openSUSE-SU-2018:0023 (SUSE)
openSUSE-SU-2018:0022 (SUSE)
SUSE-SU-2018:0012 (SUSE)
SUSE-SU-2018:0011 (SUSE)
SUSE-SU-2018:0010 (SUSE)
DSA-4082 (DEBIAN)
[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update (MLIST)
USN-3583-2 (UBUNTU)
USN-3583-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
RHSA-2018:2948 (REDHAT)
CVE: CVE-2017-17807
CVE: CVE-2017-17807
Id:
CVE-2017-17807
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17807
Comment
: The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
PARTIAL
Availability impact:
NONE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:P/A:N
CVSSv3 Score:
3.3
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
LOW
Availability impact:
NONE
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE:
862 (Missing Authorization)
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.6 (CONFIRM)
https://github.com/torvalds/linux/commit/4dca6ea1d9432052afb06baf2e3ae78188a4410b (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4dca6ea1d9432052afb06baf2e3ae78188a4410b (CONFIRM)
DSA-4073 (DEBIAN)
102301 (BID)
DSA-4082 (DEBIAN)
[debian-lts-announce] 20180107 [SECURITY] [DLA 1232-1] linux security update (MLIST)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3620-2 (UBUNTU)
USN-3620-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
CVE: CVE-2017-17862
CVE: CVE-2017-17862
Id:
CVE-2017-17862
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17862
Comment
: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service.
CVSSv2 Score:
4.9
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
20 (Improper Input Validation)
References:
https://www.spinics.net/lists/stable/msg206984.html (MISC)
DSA-4073 (DEBIAN)
https://github.com/torvalds/linux/commit/c131187db2d3fa2f8bf32fdf4e9a4ef805168467 (MISC)
https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-fix-branch-pruning-logic.patch?h=stretch-security (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c131187db2d3fa2f8bf32fdf4e9a4ef805168467 (MISC)
1040057 (SECTRACK)
102325 (BID)
USN-3523-2 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
CVE: CVE-2017-18075
CVE: CVE-2017-18075
Id:
CVE-2017-18075
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18075
Comment
: crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
763 (Release of Invalid Pointer or Reference)
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.13 (CONFIRM)
https://github.com/torvalds/linux/commit/d76c68109f37cb85b243a1cf0f40313afd2bae68 (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d76c68109f37cb85b243a1cf0f40313afd2bae68 (CONFIRM)
102813 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:2948 (REDHAT)
CVE: CVE-2017-18203
CVE: CVE-2017-18203
Id:
CVE-2017-18203
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18203
Comment
: The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.
CVSSv2 Score:
1.9
Access vector:
LOCAL
Access complexity:
MEDIUM
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:M/Au:N/C:N/I:N/A:P
CVSSv3 Score:
4.7
Attack vector:
LOCAL
Attack complexity:
HIGH
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3 (MISC)
https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed (MISC)
103184 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:1062 (REDHAT)
RHSA-2018:0676 (REDHAT)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3655-2 (UBUNTU)
USN-3653-2 (UBUNTU)
USN-3653-1 (UBUNTU)
USN-3657-1 (UBUNTU)
USN-3655-1 (UBUNTU)
RHSA-2018:1854 (REDHAT)
RHSA-2019:4154 (REDHAT)
CVE: CVE-2017-18204
CVE: CVE-2017-18204
Id:
CVE-2017-18204
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18204
Comment
: The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests.
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2 (MISC)
https://github.com/torvalds/linux/commit/28f5a8a7c033cbf3e32277f4cc9c6afd74f05300 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28f5a8a7c033cbf3e32277f4cc9c6afd74f05300 (MISC)
103183 (BID)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3655-2 (UBUNTU)
USN-3655-1 (UBUNTU)
CVE: CVE-2017-18208
CVE: CVE-2017-18208
Id:
CVE-2017-18208
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18208
Comment
: The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.
CVSSv2 Score:
4.9
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4 (MISC)
https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91 (MISC)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3655-2 (UBUNTU)
USN-3653-2 (UBUNTU)
USN-3653-1 (UBUNTU)
USN-3657-1 (UBUNTU)
USN-3655-1 (UBUNTU)
RHSA-2018:3096 (REDHAT)
RHSA-2018:3083 (REDHAT)
RHSA-2018:2948 (REDHAT)
RHSA-2019:3967 (REDHAT)
RHSA-2019:4058 (REDHAT)
RHSA-2019:4057 (REDHAT)
CVE: CVE-2017-7518
CVE: CVE-2017-7518
Id:
CVE-2017-7518
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7518
Comment
: A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
755 (Improper Handling of Exceptional Conditions)
References:
[kvm] 20170622 [PATCH] KVM: x86: fix singlestepping over syscall (MLIST)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7518 (CONFIRM)
https://access.redhat.com/articles/3290921 (CONFIRM)
[oss-security] 20170623 CVE-2017-7518 Kernel: KVM: debug exception via syscall emulation (MLIST)
DSA-3981 (DEBIAN)
USN-3619-2 (UBUNTU)
USN-3619-1 (UBUNTU)
RHSA-2018:0412 (REDHAT)
RHSA-2018:0395 (REDHAT)
1038782 (SECTRACK)
99263 (BID)
USN-3754-1 (UBUNTU)
CVE: CVE-2018-1000026
CVE: CVE-2018-1000026
Id:
CVE-2018-1000026
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000026
Comment
: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..
CVSSv2 Score:
6.8
Access vector:
NETWORK
Access complexity:
LOW
Authentication:
SINGLE_INSTANCE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:N/AC:L/Au: /C:N/I:N/A:C
CWE:
20 (Improper Input Validation)
References:
[netdev] 20180116 http://lists.openwall.net/netdev/2018/01/16/40 (MLIST)
[netdev] 20180118 http://lists.openwall.net/netdev/2018/01/18/96 (MLIST)
RHSA-2018:2948 (REDHAT)
RHSA-2018:3083 (REDHAT)
RHSA-2018:3096 (REDHAT)
[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update (MLIST)
https://patchwork.ozlabs.org/patch/859410/ (MISC)
USN-3617-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3620-1 (UBUNTU)
USN-3620-2 (UBUNTU)
USN-3632-1 (UBUNTU)
CVE: CVE-2018-5332
CVE: CVE-2018-5332
Id:
CVE-2018-5332
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5332
Comment
: In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
CVSSv2 Score:
7.2
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
COMPLETE
Integrity impact:
COMPLETE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
787 (Out-of-bounds Write)
References:
https://github.com/torvalds/linux/commit/c095508770aebf1b9218e77026e48345d719b17c (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c095508770aebf1b9218e77026e48345d719b17c (CONFIRM)
102507 (BID)
RHSA-2018:0470 (REDHAT)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3620-2 (UBUNTU)
USN-3620-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=60daca9efbb3e4109ebc1f7069543e5573fc124e (CONFIRM)
CVE: CVE-2018-5333
CVE: CVE-2018-5333
Id:
CVE-2018-5333
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5333
Comment
: In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
CVSSv2 Score:
4.9
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://github.com/torvalds/linux/commit/7d11f77f84b27cef452cee332f4e469503084737 (CONFIRM)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d11f77f84b27cef452cee332f4e469503084737 (CONFIRM)
102510 (BID)
RHSA-2018:0470 (REDHAT)
USN-3583-2 (UBUNTU)
USN-3583-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html (MISC)
CVE: CVE-2018-5344
CVE: CVE-2018-5344
Id:
CVE-2018-5344
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5344
Comment
: In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
References:
https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 (MISC)
102503 (BID)
USN-3583-2 (UBUNTU)
USN-3583-1 (UBUNTU)
USN-3617-2 (UBUNTU)
USN-3617-1 (UBUNTU)
USN-3619-1 (UBUNTU)
USN-3617-3 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
RHSA-2018:3096 (REDHAT)
RHSA-2018:3083 (REDHAT)
RHSA-2018:2948 (REDHAT)
CVE: CVE-2018-6927
CVE: CVE-2018-6927
Id:
CVE-2018-6927
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6927
Comment
: The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.
CVSSv2 Score:
4.6
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
PARTIAL
Integrity impact:
PARTIAL
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSSv3 Score:
7.8
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
HIGH
Integrity impact:
HIGH
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE:
190 (Integer Overflow or Wraparound)
References:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15 (MISC)
https://github.com/torvalds/linux/commit/fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbe0e839d1e22d88810f3ee3e2f1479be4c0aa4a (MISC)
103023 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
RHSA-2018:0654 (REDHAT)
RHSA-2018:1062 (REDHAT)
RHSA-2018:0676 (REDHAT)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3698-2 (UBUNTU)
USN-3697-2 (UBUNTU)
USN-3697-1 (UBUNTU)
USN-3698-1 (UBUNTU)
CVE: CVE-2018-7492
CVE: CVE-2018-7492
Id:
CVE-2018-7492
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7492
Comment
: A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel before 4.14.7 allowing local attackers to cause a system panic and a denial-of-service, related to RDS_GET_MR and RDS_GET_MR_FOR_DEST.
CVSSv2 Score:
4.9
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
COMPLETE
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://xorl.wordpress.com/2017/12/18/linux-kernel-rdma-null-pointer-dereference/ (MISC)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.7 (MISC)
https://patchwork.kernel.org/patch/10096441/ (MISC)
https://github.com/torvalds/linux/commit/f3069c6d33f6ae63a1668737bc78aaaa51bff7ca (MISC)
https://bugzilla.redhat.com/show_bug.cgi?id=1527393 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3069c6d33f6ae63a1668737bc78aaaa51bff7ca (MISC)
103185 (BID)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
DSA-4187 (DEBIAN)
[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update (MLIST)
USN-3677-2 (UBUNTU)
USN-3677-1 (UBUNTU)
USN-3674-2 (UBUNTU)
USN-3674-1 (UBUNTU)
CVE: CVE-2018-8043
CVE: CVE-2018-8043
Id:
CVE-2018-8043
Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8043
Comment
: The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference).
CVSSv2 Score:
2.1
Access vector:
LOCAL
Access complexity:
LOW
Authentication:
NONE
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
PARTIAL
CVSSv2 Vector:
AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSSv3 Score:
5.5
Attack vector:
LOCAL
Attack complexity:
LOW
Privileges required:
LOW
User interaction:
NONE
Scope:
UNCHANGED
Confidentiality impact:
NONE
Integrity impact:
NONE
Availability impact:
HIGH
CVSSv3 Vector:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE:
476 (NULL Pointer Dereference)
References:
https://github.com/torvalds/linux/commit/297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 (MISC)
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 (MISC)
USN-3619-1 (UBUNTU)
USN-3619-2 (UBUNTU)
USN-3632-1 (UBUNTU)
USN-3630-2 (UBUNTU)
USN-3630-1 (UBUNTU)
1040749 (SECTRACK)
Content available only for registered users!
ovaldb@altx-soft.com