7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.963 High
EPSS
Percentile
99.5%
a. Service Console update for COS kernel Updated COS package “kernel” addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286, CVE-2009-3547, CVE-2009-3613 to the security issues fixed in kernel 2.6.18-164.6.1 The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-3612, CVE-2009-3620, CVE-2009-3621, CVE-2009-3726 to the security issues fixed in kernel 2.6.18-164.9.1. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2007-4567, CVE-2009-4536, CVE-2009-4537, CVE-2009-4538 to the security issues fixed in kernel 2.6.18-164.10.1 The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2006-6304, CVE-2009-2910, CVE-2009-3080, CVE-2009-3556, CVE-2009-3889, CVE-2009-3939, CVE-2009-4020, CVE-2009-4021, CVE-2009-4138, CVE-2009-4141, and CVE-2009-4272 to the security issues fixed in kernel 2.6.18-164.11.1. Column 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.
CPE | Name | Operator | Version |
---|---|---|---|
esx | lt | Apply | |
esx | lt | Path | |
esx | lt | ESX400-201005401-SG | |
esxi | lt | Apply | |
esxi | lt | Path | |
esxi | lt | ESXi400-201005401-SG | |
esxi | lt | ESXe350-201006401-I-SG | |
esx | eq | any | |
esx | lt | ESX400-201005406-SG | |
esx | lt | ESX350-201006408-SG |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6304
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4567
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1384
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1387
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2409
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2695
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2908
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2910
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3080
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3228
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3286
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3547
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3563
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3612
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3613
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3620
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3621
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3726
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3889
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3939
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4021
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4138
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4141
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4212
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4272
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4355
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4537
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0001
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0290
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0382
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0426
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0427
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.963 High
EPSS
Percentile
99.5%