Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-7837
HistorySep 19, 2017 - 4:29 p.m.

CVE-2015-7837

2017-09-1916:29:00
CWE-254
[email protected]
web.nvd.nist.gov
7

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.1

Confidence

High

EPSS

0

Percentile

5.1%

JSON

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.

Affected configurations

Nvd
Node
redhatenterprise_linuxMatch7.0
OR
redhatenterprise_linuxMatch7.2
OR
redhatenterprise_linuxMatch7.3
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_server_ausMatch7.3
OR
redhatenterprise_linux_server_ausMatch7.4
OR
redhatenterprise_linux_workstationMatch7.0
OR
redhatenterprise_mrgMatch2.0
OR
redhatkernel-rtMatch7.0

Related

cve 1
prion 1
ubuntucve 1
cvelist 1
debiancve 1
f5 2
ubuntu 2
nessus 13
openvas 7
cloudfoundry 1
redhat 2
oraclelinux 2
ibm 1
centos 1
cve
cve
CVE-2015-7837
2017-09-19 16:29:00
prion
prion
Design/Logic Flaw
2017-09-19 16:29:00
ubuntucve
ubuntucve
CVE-2015-7837
2015-10-15 00:00:00
cvelist
cvelist
CVE-2015-7837
2017-09-19 16:00:00
debiancve
debiancve
CVE-2015-7837
2017-09-19 16:29:00
f5
f5
K12903841 : Linux kernel vulnerabilities CVE-2015-4170, CVE-2015-6526, and CVE-2015-7837
2016-01-28 00:00:00
SOL12903841 - Linux kernel vulnerabilities CVE-2015-4170, CVE-2015-6526, and CVE-2015-7837
2016-01-28 00:00:00
ubuntu
ubuntu
Linux kernel (Xenial HWE) vulnerabilities
2017-08-28 00:00:00
Linux kernel vulnerabilities
2017-08-28 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3405-2)
2017-08-29 00:00:00
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3405-1)
2017-08-29 00:00:00
RHEL 7 : kernel-rt (RHSA-2015:2411)
2016-02-04 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3405-1)
2017-08-29 00:00:00
Ubuntu: Security Advisory (USN-3405-2)
2017-08-29 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-2311)
2020-11-02 00:00:00
cloudfoundry
cloudfoundry
USN-3405-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2017-09-21 00:00:00
redhat
redhat
(RHSA-2015:2411) Important: kernel-rt security, bug fix, and enhancement update
2015-11-19 13:46:10
(RHSA-2015:2152) Important: kernel security, bug fix, and enhancement update
2015-11-19 19:35:51
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2015-11-24 00:00:00
Unbreakable Enterprise kernel security update
2019-01-04 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:33:24
centos
centos
kernel, perf, python security update
2015-11-30 19:36:22

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.1

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2015-7837
cve1prion1ubuntucve1cvelist1debiancve1f52ubuntu2nessus13openvas7cloudfoundry1redhat2oraclelinux2ibm1centos1