UbuntuUSN-4351-1Linux firmware vulnerability
6.8 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
7.6 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:M/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
61.6%
Releases
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- linux-firmware - Firmware for Linux kernel drivers
Details
Eli Biham and Lior Neumann discovered that certain Bluetooth devices
incorrectly validated key exchange parameters. An attacker could possibly
use this issue to obtain sensitive information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | linux-firmware | < 1.173.18 | UNKNOWN |
| Ubuntu | 18.04 | noarch | nic-firmware | < 1.173.18 | UNKNOWN |
| Ubuntu | 18.04 | noarch | scsi-firmware | < 1.173.18 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-firmware | < 1.157.23 | UNKNOWN |
| Ubuntu | 16.04 | noarch | nic-firmware | < 1.157.23 | UNKNOWN |
| Ubuntu | 16.04 | noarch | scsi-firmware | < 1.157.23 | UNKNOWN |
References
Related
6.8 Medium
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
7.6 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:M/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
61.6%