[SECURITY] [DLA 1731-2] linux regression update

🗓️ 01 Apr 2019 18:38:55Reported by DebianType

debian🔗 lists.debian.org👁 300 Views

linux regression update to fix vulnerabilities and regression

Reporter	Title	Published	Views	Family All 1000
Gitee	Exploit for Observable Discrepancy in Intel Atom_C	28 Oct 202014:04	–	gitee
Gitee	Exploit for Improper Access Control in Xen	14 Aug 202123:00	–	gitee
Gitee	Exploit for Observable Discrepancy in Intel Atom_C	6 Sep 202513:01	–	gitee
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)	24 Jan 201912:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager has released VM v2.0.1 in response to the vulnerability known as Spectre.	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Warehouse has released a fix in response to the vulnerability known as Spectre (CVE-2017-5753)	16 Jun 201814:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754 (known as Spectre and Meltdown).	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera Products and the Meltdown and Spectre vulnerabilities (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754)	18 Jun 202617:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Governance and Intelligence has released a fixpack in response to the vulnerabilities known as Spectre and Meltdown	27 Jul 201812:21	–	ibm

01 Apr 2019 18:38Current

6.7Medium risk

Vulners AI Score6.7

CVSS 36.5 - 7.8

CVSS 27.2

CVSS 3.15.6 - 8.1

EPSS0.93838

SSVC

linux regression update vulnerabilities privilege escalation denial of service information leaks xfs spectre memory over-read buffer overflow integer overflows nfs race condition vulnerability