Lucene search

K
ubuntuUbuntuUSN-2685-1
HistoryJul 24, 2015 - 12:00 a.m.

Linux kernel vulnerabilities

2015-07-2400:00:00
ubuntu.com
38

6.1 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.399 Low

EPSS

Percentile

97.2%

Releases

  • Ubuntu 14.10

Packages

  • linux - Linux kernel

Details

A flaw was discovered in the kvm (kernel virtual machine) subsystem’s
kvm_apic_has_events function. A unprivileged local user could exploit this
flaw to cause a denial of service (system crash). (CVE-2015-4692)

A flaw was discovered in how the Linux kernel handles invalid UDP
checksums. A remote attacker could exploit this flaw to cause a denial of
service using a flood of UDP packets with invalid checksums.
(CVE-2015-5364)

A flaw was discovered in how the Linux kernel handles invalid UDP
checksums. A remote attacker can cause a denial of service against
applications that use epoll by injecting a single packet with an invalid
checksum. (CVE-2015-5366)

6.1 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.399 Low

EPSS

Percentile

97.2%

Related for USN-2685-1