7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
61.7%
USN-3338-1 fixed vulnerabilities in the Linux kernel. However, the fix
for CVE-2017-1000364 introduced regressions for some Java applications.
This update addresses the issue. We apologize for the inconvenience.
Original advisory details:
It was discovered that the stack guard page for processes in the Linux
kernel was not sufficiently large enough to prevent overlapping with the
heap. An attacker could leverage this with another vulnerability to execute
arbitrary code and gain administrative privileges (CVE-2017-1000364)
Jesse Hertz and Tim Newsham discovered that the Linux netfilter
implementation did not correctly perform validation when handling 32 bit
compatibility IPT_SO_SET_REPLACE events on 64 bit platforms. A local
unprivileged attacker could use this to cause a denial of service (system
crash) or execute arbitrary code with administrative privileges.
(CVE-2016-4997)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-powerpc-smp | < 3.2.0.129.143 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-129-generic | < 3.2.0-129.174 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-powerpc | < 3.2.0.129.143 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-129-omap | < 3.2.0-129.174 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-129-powerpc-smp | < 3.2.0-129.174 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-generic | < 3.2.0.129.143 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-129-highbank | < 3.2.0-129.174 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-129-powerpc64-smp | < 3.2.0-129.174 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-highbank | < 3.2.0.129.143 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-image-3.2.0-129-virtual | < 3.2.0-129.174 | UNKNOWN |
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
61.7%