[USN-3266-2] Linux kernel (HWE) vulnerability
Severity
Medium
Affected Packages
4
CVEs
1
The system could be made to crash under certain conditions.
USN-3266-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.10.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS.
Alexander Popov discovered that a race condition existed in the Stream
Control Transmission Protocol (SCTP) implementation in the Linux kernel. A
local attacker could use this to cause a denial of service (system crash).
| Package | Affected Version |
|---|---|
 pkg:deb/ubuntu/linux-image-extra-4.8.0-49-generic?distro=xenial
|
< 4.8.0-49.52~16.04.1 |
|
pkg:deb/ubuntu/linux-image-4.8.0-49-lowlatency?distro=xenial
|
< 4.8.0-49.52~16.04.1 |
|
pkg:deb/ubuntu/linux-image-4.8.0-49-generic?distro=xenial
|
< 4.8.0-49.52~16.04.1 |
|
pkg:deb/ubuntu/linux-image-4.8.0-49-generic-lpae?distro=xenial
|
< 4.8.0-49.52~16.04.1 |
- ID
- USN-3266-2
- Severity
- medium
- URL
- https://ubuntu.com/security/notices/USN-3266-2
- Published
-
2017-04-25T02:46:04
(7 years ago) - Modified
-
2017-04-25T02:46:04
(7 years ago) - Other Advisories
-
-
ALAS-2017-805
-
ALAS-2017-814
-
ASA-201702-17
-
ASA-201702-18
-
DSA-3804-1
-
ELSA-2017-1308
-
ELSA-2017-3539
-
ELSA-2017-3566
-
ELSA-2017-3567
-
FEDORA-2017-2e1f3694b2
-
FEDORA-2017-387ff46a66
-
FEDORA-2017-fb89ca752a
-
RHSA-2017:1308
-
SUSE-SU-2017:0575-1
-
SUSE-SU-2017:1247-1
-
SUSE-SU-2017:1301-1
-
SUSE-SU-2017:1360-1
-
SUSE-SU-2017:1990-1
-
SUSE-SU-2017:2342-1
-
SUSE-SU-2017:2525-1
-
USN-3264-1
-
USN-3264-2
-
USN-3265-1
-
USN-3265-2
-
USN-3266-1
-
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:deb/ubuntu/linux-image-extra-4.8.0-49-generic?distro=xenial | ubuntu |
linux-image-extra-4.8.0-49-generic
|
< 4.8.0-49.52~16.04.1 | xenial | ||
| Affected | pkg:deb/ubuntu/linux-image-4.8.0-49-lowlatency?distro=xenial | ubuntu |
linux-image-4.8.0-49-lowlatency
|
< 4.8.0-49.52~16.04.1 | xenial | ||
| Affected | pkg:deb/ubuntu/linux-image-4.8.0-49-generic?distro=xenial | ubuntu |
linux-image-4.8.0-49-generic
|
< 4.8.0-49.52~16.04.1 | xenial | ||
| Affected | pkg:deb/ubuntu/linux-image-4.8.0-49-generic-lpae?distro=xenial | ubuntu |
linux-image-4.8.0-49-generic-lpae
|
< 4.8.0-49.52~16.04.1 | xenial |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |