WALinuxAgent vulnerability

2019-03-1200:00:00

ubuntu.com

100

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

68.6%

JSON

Releases

Ubuntu 18.10
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

walinuxagent - Windows Azure Linux Agent

Details

It was discovered that WALinuxAgent created swap files with incorrect
permissions. A local attacker could possibly use this issue to obtain
sensitive information from the swap file.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.10noarchwalinuxagent< 2.2.32-0ubuntu1~18.10.2UNKNOWN
Ubuntu18.04noarchwalinuxagent< 2.2.32-0ubuntu1~18.04.2UNKNOWN
Ubuntu16.04noarchwalinuxagent< 2.2.32-0ubuntu1~16.04.2UNKNOWN
Ubuntu14.04noarchwalinuxagent< 2.2.32-0ubuntu1~14.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.10	noarch	walinuxagent	< 2.2.32-0ubuntu1~18.10.2	UNKNOWN
Ubuntu	18.04	noarch	walinuxagent	< 2.2.32-0ubuntu1~18.04.2	UNKNOWN
Ubuntu	16.04	noarch	walinuxagent	< 2.2.32-0ubuntu1~16.04.2	UNKNOWN
Ubuntu	14.04	noarch	walinuxagent	< 2.2.32-0ubuntu1~14.04.2	UNKNOWN