CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
92.7%
It was discovered that a buffer overflow existed in the Bluetooth stack of
the Linux kernel when handling L2CAP configuration responses. A physically
proximate attacker could use this to cause a denial of service (system
crash). (CVE-2017-1000251)
It was discovered that the asynchronous I/O (aio) subsystem of the Linux
kernel did not properly set permissions on aio memory mappings in some
situations. An attacker could use this to more easily exploit other
vulnerabilities. (CVE-2016-10044)
Baozeng Ding and Andrey Konovalov discovered a race condition in the L2TPv3
IP Encapsulation implementation in the Linux kernel. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2016-10200)
Andreas Gruenbacher and Jan Kara discovered that the filesystem
implementation in the Linux kernel did not clear the setgid bit during a
setxattr call. A local attacker could use this to possibly elevate group
privileges. (CVE-2016-7097)
Sergej Schumilo, Ralf Spenneberg, and Hendrik Schwartke discovered that the
key management subsystem in the Linux kernel did not properly allocate
memory in some situations. A local attacker could use this to cause a
denial of service (system crash). (CVE-2016-8650)
Vlad Tsyrklevich discovered an integer overflow vulnerability in the VFIO
PCI driver for the Linux kernel. A local attacker with access to a vfio PCI
device file could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2016-9083, CVE-2016-9084)
It was discovered that an information leak existed in __get_user_asm_ex()
in the Linux kernel. A local attacker could use this to expose sensitive
information. (CVE-2016-9178)
CAI Qian discovered that the sysctl implementation in the Linux kernel did
not properly perform reference counting in some situations. An unprivileged
attacker could use this to cause a denial of service (system hang).
(CVE-2016-9191)
It was discovered that the keyring implementation in the Linux kernel in
some situations did not prevent special internal keyrings from being joined
by userspace keyrings. A privileged local attacker could use this to bypass
module verification. (CVE-2016-9604)
It was discovered that an integer overflow existed in the trace subsystem
of the Linux kernel. A local privileged attacker could use this to cause a
denial of service (system crash). (CVE-2016-9754)
Andrey Konovalov discovered that the IPv4 implementation in the Linux
kernel did not properly handle invalid IP options in some situations. An
attacker could use this to cause a denial of service or possibly execute
arbitrary code. (CVE-2017-5970)
Dmitry Vyukov discovered that the Linux kernel did not properly handle TCP
packets with the URG flag. A remote attacker could use this to cause a
denial of service. (CVE-2017-6214)
It was discovered that a race condition existed in the AF_PACKET handling
code in the Linux kernel. A local attacker could use this to cause a denial
of service (system crash) or possibly execute arbitrary code.
(CVE-2017-6346)
It was discovered that the keyring implementation in the Linux kernel did
not properly restrict searches for dead keys. A local attacker could use
this to cause a denial of service (system crash). (CVE-2017-6951)
Dmitry Vyukov discovered that the generic SCSI (sg) subsystem in the Linux
kernel contained a stack-based buffer overflow. A local attacker with
access to an sg device could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2017-7187)
Eric Biggers discovered a memory leak in the keyring implementation in the
Linux kernel. A local attacker could use this to cause a denial of service
(memory consumption). (CVE-2017-7472)
It was discovered that a buffer overflow existed in the Broadcom FullMAC
WLAN driver in the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2017-7541)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 14.04 | noarch | linux-image-3.13.0-132-generic | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | block-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | crypto-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | fat-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | fb-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | firewire-core-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | floppy-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | fs-core-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | fs-secondary-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
Ubuntu | 14.04 | noarch | input-modules-3.13.0-132-generic-di | < 3.13.0-132.181 | UNKNOWN |
ubuntu.com/security/CVE-2016-10044
ubuntu.com/security/CVE-2016-10200
ubuntu.com/security/CVE-2016-7097
ubuntu.com/security/CVE-2016-8650
ubuntu.com/security/CVE-2016-9083
ubuntu.com/security/CVE-2016-9084
ubuntu.com/security/CVE-2016-9178
ubuntu.com/security/CVE-2016-9191
ubuntu.com/security/CVE-2016-9604
ubuntu.com/security/CVE-2016-9754
ubuntu.com/security/CVE-2017-1000251
ubuntu.com/security/CVE-2017-5970
ubuntu.com/security/CVE-2017-6214
ubuntu.com/security/CVE-2017-6346
ubuntu.com/security/CVE-2017-6951
ubuntu.com/security/CVE-2017-7187
ubuntu.com/security/CVE-2017-7472
ubuntu.com/security/CVE-2017-7541
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
92.7%