[ASA-201801-3] linux-zen: multiple issues

🗓️ 05 Jan 2018 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 53 Views

linux-zen package multiple security issues update 4.14.11-

Reporter	Title	Published	Views	Family All 1527
Gitee	Exploit for Improper Access Control in Xen	24 Jan 202110:46	–	gitee
Gitee	Exploit for Improper Access Control in Xen	14 Aug 202123:00	–	gitee
Gitee	Exploit for Observable Discrepancy in Intel Atom_C	6 Sep 202513:01	–	gitee
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
IBM Security Bulletins	Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754 (known as Spectre and Meltdown).	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera Products and the Meltdown and Spectre vulnerabilities (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754)	8 Dec 201804:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Governance and Intelligence has released a fixpack in response to the vulnerabilities known as Spectre and Meltdown	27 Jul 201812:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management on Cloud is affected by vulnerabilities known as Spectre and Meltdown	16 Jun 201814:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i has released PTFs in response to the vulnerabilities known as Spectre and Meltdown.	7 Oct 202416:26	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	linux-zen	4.14.11-1	linux-zen-4.14.11-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-571
bugs	www.bugs.archlinux.org/task/56832
bugs	www.bugs.chromium.org/p/project-zero/issues/detail
openwall	www.openwall.com/lists/oss-security/2017/12/21/2
git	www.git.kernel.org/linus/95a762e2c8c942780948091f8f2a4f32fce1ac6f
git	www.git.kernel.org/linus/0c17d1d2c61936401f4702e1846e2c19b200f958
git	www.git.kernel.org/linus/93c647643b48f0131f02e45da3bd367d80443291
github	www.github.com/google/syzkaller/blob/master/docs/linux/found_bugs_usb.md
git	www.git.kernel.org/linus/48a4ff1c7bb5a32d2e396b03132d20d552c0eca7
openwall	www.openwall.com/lists/oss-security/2017/12/12/7

05 Jan 2018 00:00Current

3.2Low risk

Vulners AI Score3.2

CVSS 27.2

CVSS 3.15.6 - 7.8

CVSS 37.8

EPSS0.89689

SSVC

linux-zen multiple issues access restriction bypass denial of service privilege escalation information disclosure bpf ebpf verifier module netlink messages usb core subsystem raw sockets salsa20 encryption algorithm