[USN-3386-1] Linux kernel vulnerabilities

Severity High
Affected Packages 9
CVEs 2

Several security issues were fixed in the Linux kernel.

Andrey Konovalov discovered a race condition in the UDP Fragmentation
Offload (UFO) code in the Linux kernel. A local attacker could use this to
cause a denial of service or execute arbitrary code. (CVE-2017-1000112)

Andrey Konovalov discovered a race condition in AF_PACKET socket option
handling code in the Linux kernel. A local unprivileged attacker could use
this to cause a denial of service or possibly execute arbitrary code.
(CVE-2017-1000111)

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-image-extra-3.13.0-128-generic?distro=trusty ubuntu linux-image-extra-3.13.0-128-generic < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-powerpc64-smp?distro=trusty ubuntu linux-image-3.13.0-128-powerpc64-smp < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-powerpc64-emb?distro=trusty ubuntu linux-image-3.13.0-128-powerpc64-emb < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-powerpc-smp?distro=trusty ubuntu linux-image-3.13.0-128-powerpc-smp < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-powerpc-e500mc?distro=trusty ubuntu linux-image-3.13.0-128-powerpc-e500mc < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-powerpc-e500?distro=trusty ubuntu linux-image-3.13.0-128-powerpc-e500 < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-lowlatency?distro=trusty ubuntu linux-image-3.13.0-128-lowlatency < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-generic?distro=trusty ubuntu linux-image-3.13.0-128-generic < 3.13.0-128.177 trusty
Affected pkg:deb/ubuntu/linux-image-3.13.0-128-generic-lpae?distro=trusty ubuntu linux-image-3.13.0-128-generic-lpae < 3.13.0-128.177 trusty
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...