Lucene search
UbuntuUSN-5039-1HistoryAug 12, 2021 - 12:00 a.m.
Linux kernel vulnerability
2021-08-1200:00:00
ubuntu.com
114
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
65.1%
Releases
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- linux - Linux kernel
- linux-aws - Linux kernel for Amazon Web Services (AWS) systems
- linux-kvm - Linux kernel for cloud environments
- linux-lts-xenial - Linux hardware enablement kernel from Xenial for Trusty
Details
Andy Nguyen discovered that the netfilter subsystem in the Linux kernel
contained an out-of-bounds write in its setsockopt() implementation. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 16.04 | noarch | linux-image-4.4.0-1096-kvm | < 4.4.0-1096.105 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-buildinfo-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-cloud-tools-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-headers-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-image-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-image-4.4.0-1093-kvm-dbgsym | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-kvm-cloud-tools-4.4.0-1093 | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-kvm-headers-4.4.0-1093 | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-kvm-tools-4.4.0-1093 | < 4.4.0-1093.102 | UNKNOWN |
| Ubuntu | 16.04 | noarch | linux-modules-4.4.0-1093-kvm | < 4.4.0-1093.102 | UNKNOWN |
References
Related
nessus
nessus
Ubuntu 16.04 ESM : Linux kernel vulnerability (USN-5039-1)
2021-08-12 00:00:00
F5 Networks BIG-IP : Linux kernel vulnerability (K06524534)
2022-07-07 00:00:00
f5
f5
K06524534 : Linux kernel vulnerability CVE-2021-22555
2022-07-07 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Linux Linux Kernel
2021-07-16 19:12:57
Exploit for Out-of-bounds Write in Linux Linux Kernel
2023-08-05 18:56:18
Exploit for Out-of-bounds Write in Linux Linux Kernel
2022-04-05 06:35:25
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-22555
2021-09-21 22:04:54
Fix of CVE: CVE-2021-22555
2021-09-21 22:05:12
debiancve
debiancve
CVE-2021-22555
2021-07-07 12:15:00
metasploit
metasploit
Netfilter x_tables Heap OOB Write Privilege Escalation
2021-10-04 15:48:23
redhatcve
redhatcve
CVE-2021-22555
2021-07-07 19:42:44
prion
prion
Heap overflow
2021-07-07 12:15:00
veracode
veracode
Denial Of Service
2021-08-18 17:49:29
zdt
zdt
Netfilter x_tables Heap Out-Of-Bounds Write / Privilege Escalation Exploit
2021-10-07 00:00:00
Linux Kernel 2.6.19 < 5.9 - (Netfilter) Local Privilege Escalation Exploit
2021-07-16 00:00:00
packetstorm
packetstorm
Netfilter x_tables Heap Out-Of-Bounds Write / Privilege Escalation
2021-10-07 00:00:00
Linux Kernel Netfilter Heap Out-Of-Bounds Write
2021-07-16 00:00:00
ubuntu
ubuntu
Kernel Live Patch Security Notice
2021-08-16 00:00:00
Kernel Live Patch Security Notice
2021-09-13 00:00:00
Kernel Live Patch Security Notice
2022-01-06 00:00:00
ubuntucve
ubuntucve
CVE-2021-22555
2021-07-07 00:00:00
CVE-2021-0937
2021-10-07 00:00:00
cve
cve
CVE-2021-22555
2021-07-07 12:15:00
osv
osv
CVE-2021-22555
2021-07-07 12:15:08
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability
2021-08-12 22:28:40
Important: kernel-rt security and bug fix update
2021-08-10 12:10:45
openvas
openvas
Ubuntu: Security Advisory (USN-5039-1)
2022-08-26 00:00:00
openSUSE: Security Advisory for the (openSUSE-SU-2021:2409-1)
2021-07-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2415-1)
2021-07-21 00:00:00
exploitdb
exploitdb
Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation
2021-07-15 00:00:00
redhat
redhat
(RHSA-2021:3381) Important: kpatch-patch security update
2021-08-31 08:41:59
(RHSA-2021:3321) Important: kernel security and bug fix update
2021-08-31 07:37:22
(RHSA-2021:3181) Important: kpatch-patch security update
2021-08-17 07:54:01
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-10-08 16:57:33
suse
suse
Security update for the Linux Kernel (important)
2021-07-20 00:00:00
Security update for the Linux Kernel (important)
2021-07-20 00:00:00
Security update for the Linux Kernel (important)
2021-07-22 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2021-08-10 12:10:45
kernel security, bug fix, and enhancement update
2021-08-10 11:56:07
photon
photon
Important Photon OS Security Update - PHSA-2021-0234
2021-05-04 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0234
2021-05-08 00:00:00
Important Photon OS Security Update - PHSA-2021-0341
2021-04-29 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2021-08-11 00:00:00
Unbreakable Enterprise kernel security update
2021-08-04 00:00:00
kernel security and bug fix update
2021-08-31 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2021-08-10 11:56:07
centos
centos
bpftool, kernel, perf, python security update
2021-08-31 21:19:47
ibm
ibm
amazon
amazon
Important: kernel
2021-04-20 17:55:00
androidsecurity
androidsecurity
Pixel Update Bulletin—October 2021
2021-10-04 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2021-07-21 05:44:30
redos
redos
ROS-20220919-01
2022-09-19 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
65.1%
Related for USN-5039-1