Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3510-1
HistoryDec 08, 2017 - 12:00 a.m.

Linux kernel vulnerabilities

2017-12-0800:00:00
ubuntu.com
51

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

55.5%

JSON

Releases

  • Ubuntu 14.04 ESM

Packages

  • linux - Linux kernel

Details

Mohamed Ghannam discovered that a use-after-free vulnerability existed in
the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-16939)

It was discovered that the Linux kernel did not properly handle copy-on-
write of transparent huge pages. A local attacker could use this to cause a
denial of service (application crashes) or possibly gain administrative
privileges. (CVE-2017-1000405)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlinux-image-3.13.0-137-generic< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchblock-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchcrypto-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchfat-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchfb-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchfirewire-core-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchfloppy-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchfs-core-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchfs-secondary-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Ubuntu14.04noarchinput-modules-3.13.0-137-generic-di< 3.13.0-137.186UNKNOWN
Rows per page:
1-10 of 591

Related

openvas 46
ubuntu 9
nessus 53
suse 56
virtuozzo 4
cloudfoundry 2
fedora 2
exploitpack 2
altlinux 1
cvelist 2
cve 2
nvd 2
exploitdb 3
prion 2
ubuntucve 2
debiancve 2
oraclelinux 1
redhatcve 2
veracode 1
f5 1
photon 1
threatpost 1
redhat 1
seebug 1
openvas
openvas
Ubuntu: Security Advisory (USN-3511-1)
2017-12-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:3225-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:3226-1)
2021-04-19 00:00:00
ubuntu
ubuntu
Linux kernel (Azure) vulnerabilities
2017-12-08 00:00:00
Linux kernel (Trusty HWE) vulnerabilities
2017-12-08 00:00:00
Linux kernel (HWE) vulnerabilities
2017-12-07 00:00:00
nessus
nessus
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:3226-1) (Dirty COW)
2017-12-07 00:00:00
Photon OS 1.0: Linux PHSA-2017-1.0-0093
2019-02-07 00:00:00
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:3225-1) (Dirty COW)
2017-12-07 00:00:00
suse
suse
Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP2) (important)
2017-12-14 15:20:54
Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3) (important)
2017-12-14 21:16:54
Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP3) (important)
2017-12-14 21:12:53
virtuozzo
virtuozzo
Important kernel update: CVE-2017-8824 and other; Virtuozzo ReadyKernel patch 39.2 for Virtuozzo 7.0.4 and 7.0.4 HF3
2017-12-11 00:00:00
Important kernel update: CVE-2017-8824 and other; Virtuozzo ReadyKernel patch 39.1 for Virtuozzo 7.0.6
2017-12-11 00:00:00
Important kernel update: CVE-2017-8824 and other; Virtuozzo ReadyKernel patch 39.1 for Virtuozzo 7.0.5
2017-12-11 00:00:00
cloudfoundry
cloudfoundry
USN-3509-4: Linux kernel (Xenial HWE) regression | Cloud Foundry
2017-12-16 00:00:00
USN-3509-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2017-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: kernel-4.13.16-302.fc27
2017-12-04 19:05:31
[SECURITY] Fedora 26 Update: kernel-4.13.16-202.fc26
2017-12-04 20:15:47
exploitpack
exploitpack
Linux Kernel - The Huge Dirty Cow Overwriting The Huge Zero Page (1)
2017-11-30 00:00:00
Linux Kernel (Ubuntu 17.04) - XFRM Local Privilege Escalation
2017-11-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1.1
2017-12-05 00:00:00
cvelist
cvelist
CVE-2017-1000405
2017-11-30 22:00:00
CVE-2017-16939
2017-11-24 10:00:00
cve
cve
CVE-2017-1000405
2017-11-30 22:29:00
CVE-2017-16939
2017-11-24 10:29:00
nvd
nvd
CVE-2017-1000405
2017-11-30 22:29:00
CVE-2017-16939
2017-11-24 10:29:00
exploitdb
exploitdb
Linux Kernel - &#039;The Huge Dirty Cow&#039; Overwriting The Huge Zero Page (1)
2017-11-30 00:00:00
Linux Kernel - &#039;The Huge Dirty Cow&#039; Overwriting The Huge Zero Page (2)
2017-12-11 00:00:00
Linux Kernel (Ubuntu 17.04) - &#039;XFRM&#039; Local Privilege Escalation
2017-11-23 00:00:00
prion
prion
Code injection
2017-11-30 22:29:00
Design/Logic Flaw
2017-11-24 10:29:00
ubuntucve
ubuntucve
CVE-2017-1000405
2017-11-30 00:00:00
CVE-2017-16939
2017-11-24 00:00:00
debiancve
debiancve
CVE-2017-1000405
2017-11-30 22:29:00
CVE-2017-16939
2017-11-24 10:29:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2018-06-13 00:00:00
redhatcve
redhatcve
CVE-2017-16939
2019-10-10 22:51:41
CVE-2017-1000405
2017-11-30 07:49:34
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:22:37
f5
f5
K81158013 : Linux kernel vulnerability CVE-2017-16939
2018-02-23 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-1.0-0093
2017-12-18 00:00:00
threatpost
threatpost
Flaw Found In Dirty COW Patch
2017-12-01 11:43:06
redhat
redhat
(RHSA-2018:0180) Important: kernel-alt security and bug fix update
2018-01-25 10:47:54
seebug
seebug
"Huge Dirty COW" (CVE-2017–1000405)
2017-11-30 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

55.5%

JSON
Related for USN-3510-1
openvas46ubuntu9nessus53suse56virtuozzo4cloudfoundry2fedora2exploitpack2altlinux1cvelist2cve2nvd2exploitdb3prion2ubuntucve2debiancve2oraclelinux1redhatcve2veracode1f51photon1threatpost1redhat1seebug1