Lucene search
UbuntuUSN-3541-1HistoryJan 23, 2018 - 12:00 a.m.
Linux kernel vulnerabilities
2018-01-2300:00:00
ubuntu.com
44
Releases
- Ubuntu 17.10
Packages
- linux - Linux kernel
Details
Jann Horn discovered that microprocessors utilizing speculative
execution and branch prediction may allow unauthorized memory
reads via sidechannel attacks. This flaw is known as Spectre. A
local attacker could use this to expose sensitive information,
including kernel memory. This update provides mitigations for the
i386 (CVE-2017-5753 only), amd64, ppc64el, and s390x architectures.
(CVE-2017-5715, CVE-2017-5753)
USN-3523-1 mitigated CVE-2017-5754 (Meltdown) for the amd64
architecture in Ubuntu 17.10. This update provides the corresponding
mitigations for the ppc64el architecture. Original advisory details:
Jann Horn discovered that microprocessors utilizing speculative
execution and indirect branch prediction may allow unauthorized memory
reads via sidechannel attacks. This flaw is known as Meltdown. A local
attacker could use this to expose sensitive information, including
kernel memory. (CVE-2017-5754)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 17.10 | noarch | linux-image-4.13.0-31-generic | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | block-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | crypto-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | fat-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | fb-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | firewire-core-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | floppy-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | fs-core-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | fs-secondary-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
| Ubuntu | 17.10 | noarch | input-modules-4.13.0-31-generic-di | < 4.13.0-31.34 | UNKNOWN |
Related
nessus
nessus
AIX 7.2 TL 2 : spectre_meltdown (IJ03036) (Meltdown) (Spectre)
2018-01-25 00:00:00
AIX 7.1 TL 5 : spectre_meltdown (IJ03033) (Meltdown) (Spectre)
2018-01-25 00:00:00
ibm
ibm
lenovo
lenovo
Reading Privileged Memory with a Side Channel - US
2018-10-24 12:22:52
Reading Privileged Memory with a Side Channel - Lenovo Support US
2018-10-24 12:22:52
threatpost
threatpost
Experts Weigh In On Spectre Patch Challenges
2018-01-07 23:21:34
Vendors Share Patch Updates on Spectre and Meltdown Mitigation Efforts
2018-01-04 13:01:52
suse
suse
Security update for the Linux Kernel (important)
2018-01-11 18:10:26
Security update for the Linux Kernel (important)
2018-01-16 21:08:19
Security update for the Linux Kernel (important)
2018-01-22 15:08:49
qualysblog
qualysblog
Processor Vulnerabilities – Meltdown and Spectre
2018-01-04 02:17:43
Meltdown/Spectre and Qualys Cloud Platform
2018-01-09 02:36:19
vmware
vmware
symantec
symantec
Multiple CPU Hardware CVE-2017-5753 Information Disclosure Vulnerability
2018-01-03 00:00:00
SA161: Local Information Disclosure Due to Meltdown and Spectre Attacks
2018-01-08 08:00:00
f5
f5
huawei
huawei
Security Advisory - CPU Vulnerabilities 'Meltdown' and 'Spectre'
2018-01-06 00:00:00
Security Advisory - CPU Vulnerabilities Meltdown and Spectre
2018-06-06 00:00:00
redhat
redhat
(RHSA-2018:0018) Important: kernel security update
2018-01-04 12:42:07
(RHSA-2018:0022) Important: kernel security update
2018-01-04 16:02:23
(RHSA-2018:0182) Important: kernel security and bug fix update
2018-01-25 11:23:54
openvas
openvas
Ubuntu: Security Advisory (USN-3541-1)
2018-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1637)
2020-01-23 00:00:00
ubuntu
ubuntu
Linux kernel (HWE) vulnerabilities
2018-03-15 00:00:00
Linux kernel (Xenial HWE) vulnerabilities
2018-01-23 00:00:00
Linux kernel vulnerabilities
2018-01-23 00:00:00
arista
arista
Security Advisory 0031
2018-01-03 00:00:00
virtuozzo
virtuozzo
Important kernel security update: Fixes for Meltdown and Spectre exploits; new kernel 3.10.0-693.11.6.vz7.40.4, Virtuozzo 7.0 Update 6 Hotfix 3 (7.0.6-710)
2018-01-08 00:00:00
paloalto
paloalto
Information about Meltdown and Spectre findings
2018-01-04 00:00:00
cloudfoundry
cloudfoundry
USN-3540-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-01-23 00:00:00
malwarebytes
malwarebytes
Meltdown and Spectre fallout: patching problems persist
2018-01-11 14:00:00
Meltdown and Spectre: what you need to know
2018-01-04 15:53:24
nvidia
nvidia
cisco
cisco
CPU Side-Channel Information Disclosure Vulnerabilities
2018-01-04 22:20:00
kitploit
kitploit
centos
centos
kernel, perf, python security update
2018-01-04 19:46:26
kernel, perf, python security update
2018-01-04 11:36:27
kernel, perf, python security update
2018-03-14 14:47:28
redhatcve
redhatcve
CVE-2017-5715
2021-07-20 18:54:09
seebug
seebug
Reading privileged memory with a side-channel
(Meltdown & Spectre)
2018-01-04 00:00:00
mageia
mageia
Updated nvidia-current packages mitigates security issues
2018-01-13 17:28:36
securelist
securelist
IT threat evolution Q1 2018
2018-05-14 10:00:08
thn
thn
[Guide] How to Protect Your Devices Against Meltdown and Spectre Attacks
2018-01-04 21:18:00
Meltdown and Spectre CPU Flaws Affect Intel, ARM, AMD Processors
2018-01-03 19:34:00
citrix
citrix
Citrix Security Updates for CVE-2017-5715, CVE-2017-5753, CVE-2017-5754
2018-01-03 04:00:00
talosblog
talosblog
Meltdown and Spectre
2018-01-08 09:16:00
oraclelinux
oraclelinux
kernel security update
2018-01-04 00:00:00
Unbreakable Enterprise kernel security update
2018-01-19 00:00:00
xen
xen
Information leak via side effects of speculative execution
2018-01-03 22:29:00
cert
cert
CPU hardware vulnerable to side-channel attacks
2018-01-04 00:00:00
googleprojectzero
googleprojectzero
Reading privileged memory with a side-channel
2018-01-03 00:00:00