Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3445-2
HistoryOct 11, 2017 - 12:00 a.m.

Linux kernel (Trusty HWE) vulnerabilities

2017-10-1100:00:00
ubuntu.com
48

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

92.9%

JSON

Releases

  • Ubuntu 12.04

Packages

  • linux-lts-trusty - Linux hardware enablement kernel from Trusty for Precise ESM

Details

USN-3445-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu
12.04 ESM.

Eyal Itkin discovered that the IP over IEEE 1394 (FireWire) implementation
in the Linux kernel contained a buffer overflow when handling fragmented
packets. A remote attacker could use this to possibly execute arbitrary
code with administrative privileges. (CVE-2016-8633)

Andrey Konovalov discovered that a divide-by-zero error existed in the TCP
stack implementation in the Linux kernel. A local attacker could use this
to cause a denial of service (system crash). (CVE-2017-14106)

Related

nessus 71
ubuntu 12
openvas 27
prion 2
ubuntucve 2
redhatcve 2
veracode 2
cve 2
debiancve 2
f5 1
ibm 6
virtuozzo 5
redhat 8
mageia 12
centos 3
suse 15
cloudfoundry 2
oraclelinux 17
kitploit 1
osv 3
debian 4
nessus
nessus
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3445-1)
2017-10-11 00:00:00
Ubuntu 16.04 LTS : Linux kernel (GCP) vulnerability (USN-3443-3)
2017-10-11 00:00:00
Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3443-2)
2017-10-11 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2017-10-10 00:00:00
Linux kernel (GCP) vulnerability
2017-10-11 00:00:00
Linux kernel vulnerabilities
2017-10-10 00:00:00
openvas
openvas
Ubuntu Update for linux USN-3445-1
2017-10-11 00:00:00
Ubuntu Update for linux-gcp USN-3443-3
2017-10-11 00:00:00
Ubuntu Update for linux USN-3443-1
2017-10-11 00:00:00
prion
prion
Code injection
2016-11-28 03:59:00
Path traversal
2017-09-01 16:29:00
ubuntucve
ubuntucve
CVE-2016-8633
2016-11-27 00:00:00
CVE-2017-14106
2017-09-01 00:00:00
redhatcve
redhatcve
CVE-2016-8633
2016-11-07 07:17:20
CVE-2017-14106
2017-09-01 16:48:35
veracode
veracode
Arbitrary Code Execution
2019-05-16 02:50:12
Denial Of Service (DoS)
2019-01-15 09:23:54
cve
cve
CVE-2016-8633
2016-11-28 03:59:00
CVE-2017-14106
2017-09-01 16:29:00
debiancve
debiancve
CVE-2016-8633
2016-11-28 03:59:00
CVE-2017-14106
2017-09-01 16:29:00
f5
f5
K62178133 : Linux kernel vulnerability CVE-2017-14106
2017-10-05 00:00:00
ibm
ibm
Security Bulletin: A tcp vulnerability in Linux Kernel affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems (CVE-2017-14106)
2023-04-14 14:32:25
Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM
2018-06-18 01:34:53
Security Bulletin: Vulnerabilities in Kernel affect Power Hardware Management Console
2021-09-22 23:05:38
virtuozzo
virtuozzo
Kernel security update: CVE-2017-9242 and other; Virtuozzo ReadyKernel patch 30.3 for Virtuozzo 7.0.0, 7.0.1, and 7.0.3
2017-09-06 00:00:00
Kernel security update: CVE-2017-9242 and other; Virtuozzo ReadyKernel patch 30.3 for Virtuozzo 7.0.4 and 7.0.4 HF3
2017-09-06 00:00:00
Kernel security update: CVE-2017-9242 and other; Virtuozzo ReadyKernel patch 30.3 for Virtuozzo 7.0.5
2017-09-06 00:00:00
redhat
redhat
(RHSA-2018:2172) Important: kernel security update
2018-07-11 15:16:10
(RHSA-2017:3200) Important: kernel security and bug fix update
2017-11-14 19:40:45
(RHSA-2017:2918) Important: kernel-rt security and bug fix update
2017-10-19 13:10:34
mageia
mageia
Updated kernel-4.4.32 packages fixes security vulnerabilities
2016-11-26 13:41:56
Updated kernel-tmb-4.4.32 packages fix security vulnerability
2016-12-07 14:48:35
Updated kernel-linus-4.4.32 packages fix security vulnerability
2016-12-07 14:48:35
centos
centos
kernel, perf, python security update
2017-11-15 21:38:19
kernel, perf, python security update
2017-10-23 17:05:09
kernel security update
2018-04-27 05:53:39
suse
suse
Security update for the Linux Kernel (important)
2017-09-15 15:07:33
Security update for the Linux Kernel (important)
2017-09-15 15:12:43
Security update for the Linux Kernel (important)
2016-12-08 20:06:50
cloudfoundry
cloudfoundry
USN-3444-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2017-11-01 00:00:00
USN-3161-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2017-01-31 00:00:00
oraclelinux
oraclelinux
kernel security update
2018-10-01 00:00:00
kernel security and bug fix update
2017-11-15 00:00:00
Unbreakable Enterprise kernel security update
2018-02-26 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00
osv
osv
linux - security update
2017-09-20 00:00:00
linux - security update
2017-01-01 00:00:00
linux - security update
2017-09-19 00:00:00
debian
debian
[SECURITY] [DLA 772-1] linux security update
2017-01-01 18:24:51
[SECURITY] [DSA 3981-1] linux security update
2017-09-20 21:35:52
[SECURITY] [DSA 3981-1] linux security update
2017-09-20 21:35:52

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

92.9%

JSON
Related for USN-3445-2
nessus71ubuntu12openvas27prion2ubuntucve2redhatcve2veracode2cve2debiancve2f51ibm6virtuozzo5redhat8mageia12centos3suse15cloudfoundry2oraclelinux17kitploit1osv3debian4