Lucene search
UbuntuUSN-5357-2HistoryMar 31, 2022 - 12:00 a.m.
Linux kernel vulnerability
2022-03-3100:00:00
ubuntu.com
85
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Releases
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- linux-aws-hwe - Linux kernel for Amazon Web Services (AWS-HWE) systems
- linux-azure - Linux kernel for Microsoft Azure Cloud systems
- linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-4.15 - Linux kernel for Google Cloud Platform (GCP) systems
- linux-oracle - Linux kernel for Oracle Cloud systems
- linux-raspi2 - Linux kernel for Raspberry Pi systems
Details
It was discovered that the IPsec implementation in the Linux kernel did not
properly allocate enough memory when performing ESP transformations,
leading to a heap-based buffer overflow. A local attacker could use this to
cause a denial of service (system crash) or possibly execute arbitrary
code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | linux-image-4.15.0-1120-gcp | < 4.15.0-1120.134 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-image-4.15.0-1120-gcp-dbgsym | < 4.15.0-1120.134 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-image-gcp-lts-18.04 | < 4.15.0.1120.139 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-gcp-lts-18.04 | < 4.15.0.1120.139 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-headers-gcp-lts-18.04 | < 4.15.0.1120.139 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-modules-extra-gcp-lts-18.04 | < 4.15.0.1120.139 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-tools-gcp-lts-18.04 | < 4.15.0.1120.139 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-image-oracle-lts-18.04 | < 4.15.0.1091.101 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-headers-oracle-lts-18.04 | < 4.15.0.1091.101 | UNKNOWN |
| Ubuntu | 18.04 | noarch | linux-oracle-lts-18.04 | < 4.15.0.1091.101 | UNKNOWN |
References
Related
prion
prion
Heap overflow
2022-03-23 06:15:00
Design/Logic Flaw
2022-03-23 14:15:00
f5
f5
K53648360 : Linux kernel vulnerability CVE-2022-27666
2022-04-25 00:00:00
nessus
nessus
SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 24 for SLE 12 SP4) (SUSE-SU-2022:1248-1)
2022-04-19 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerability (USN-5357-2)
2022-04-01 00:00:00
RHEL 8 : kpatch-patch (RHSA-2022:4942)
2022-06-08 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-27666 affecting package kernel 5.10.109.1-2
2022-05-12 02:17:02
CVE-2022-27666 affecting package kernel 5.15.32.1-2
2022-04-26 19:58:10
CVE-2022-27666 affecting package hyperv-daemons 5.10.167.1-1
2023-03-02 04:18:44
osv
osv
linux-aws-hwe, linux-azure, linux-gcp, linux-gcp-4.15, linux-oracle, linux-raspi2 vulnerability
2022-03-31 22:14:36
linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-hwe, linux-kvm, linux-snapdragon vulnerability
2022-03-31 02:05:09
linux-oem-5.14 vulnerability
2022-03-28 23:13:52
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2022-05-10 00:00:00
Unbreakable Enterprise kernel-container security update
2022-05-10 00:00:00
kernel security and bug fix update
2022-07-02 00:00:00
cnvd
cnvd
Linux Kernel Buffer Overflow Vulnerability (CNVD-2022-79427)
2022-03-25 00:00:00
cloudfoundry
cloudfoundry
USN-5357-1: Linux kernel vulnerability | Cloud Foundry
2022-05-26 00:00:00
USN-5358-1: Linux kernel vulnerabilities | Cloud Foundry
2022-04-14 00:00:00
ubuntucve
ubuntucve
CVE-2022-27666
2022-03-23 00:00:00
redhat
redhat
(RHSA-2022:4942) Important: kpatch-patch security update
2022-06-08 08:20:22
(RHSA-2022:5219) Important: kpatch-patch security update
2022-06-28 06:44:44
(RHSA-2022:4809) Important: kpatch-patch security update
2022-05-31 07:57:04
veracode
veracode
Privilege Escalation
2022-04-16 16:32:53
ubuntu
ubuntu
Linux kernel vulnerability
2022-03-31 00:00:00
Linux kernel (OEM) vulnerability
2022-03-28 00:00:00
Linux kernel vulnerabilities
2022-03-31 00:00:00
redhatcve
redhatcve
CVE-2022-27666
2022-03-23 18:34:39
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Linux Linux Kernel
2022-03-23 22:54:28
ibm
ibm
cve
cve
CVE-2022-27666
2022-03-23 06:15:00
CVE-2022-0886
2022-03-23 14:15:00
debiancve
debiancve
CVE-2022-27666
2022-03-23 06:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-5357-1)
2022-04-01 00:00:00
Ubuntu: Security Advisory (USN-5353-1)
2022-03-29 00:00:00
Ubuntu: Security Advisory (USN-5357-2)
2022-04-02 00:00:00
almalinux
almalinux
Important: kernel-rt security and bug fix update
2022-06-28 00:00:00
Important: kernel security and bug fix update
2022-06-30 00:00:00
Important: kernel security and bug fix update
2022-07-01 00:00:00
rocky
rocky
kernel security and bug fix update
2022-06-28 10:52:11
kernel-rt security and bug fix update
2022-06-28 10:55:48
amazon
amazon
Important: kernel
2022-04-18 19:47:00
Important: kernel
2022-04-18 19:46:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-03-29 17:25:34
Updated kernel-linus packages fix security vulnerabilities
2022-03-29 17:25:34
redos
redos
ROS-20220413-01
2022-04-13 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0183
2022-05-14 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0183
2022-05-14 00:00:00
Important Photon OS Security Update - PHSA-2022-0393
2022-05-14 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-04-13 00:00:00
Security update for the Linux Kernel (important)
2022-04-12 00:00:00
debian
debian
[SECURITY] [DSA 5127-1] linux security update
2022-05-02 21:02:58
[SECURITY] [DSA 5173-1] linux security update
2022-07-03 15:49:12
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-05-09 21:58:04
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for USN-5357-2