Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS2-2019-1281
HistorySep 13, 2019 - 11:13 p.m.

Medium: kernel

2019-09-1323:13:00
alas.aws.amazon.com
38

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON

Issue Overview:

NOTE: This ALAS is a duplicate of ALAS2-2019-1280. The CVEs listed here are fixed in the referenced ALAS.

Affected Packages:

kernel

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update kernel to update your system.

New Packages:

aarch64:  
    kernel-4.14.143-118.123.amzn2.aarch64  
    kernel-headers-4.14.143-118.123.amzn2.aarch64  
    kernel-debuginfo-common-aarch64-4.14.143-118.123.amzn2.aarch64  
    perf-4.14.143-118.123.amzn2.aarch64  
    perf-debuginfo-4.14.143-118.123.amzn2.aarch64  
    python-perf-4.14.143-118.123.amzn2.aarch64  
    python-perf-debuginfo-4.14.143-118.123.amzn2.aarch64  
    kernel-tools-4.14.143-118.123.amzn2.aarch64  
    kernel-tools-devel-4.14.143-118.123.amzn2.aarch64  
    kernel-tools-debuginfo-4.14.143-118.123.amzn2.aarch64  
    kernel-devel-4.14.143-118.123.amzn2.aarch64  
    kernel-debuginfo-4.14.143-118.123.amzn2.aarch64  
  
i686:  
    kernel-headers-4.14.143-118.123.amzn2.i686  
  
src:  
    kernel-4.14.143-118.123.amzn2.src  
  
x86_64:  
    kernel-4.14.143-118.123.amzn2.x86_64  
    kernel-headers-4.14.143-118.123.amzn2.x86_64  
    kernel-debuginfo-common-x86_64-4.14.143-118.123.amzn2.x86_64  
    perf-4.14.143-118.123.amzn2.x86_64  
    perf-debuginfo-4.14.143-118.123.amzn2.x86_64  
    python-perf-4.14.143-118.123.amzn2.x86_64  
    python-perf-debuginfo-4.14.143-118.123.amzn2.x86_64  
    kernel-tools-4.14.143-118.123.amzn2.x86_64  
    kernel-tools-devel-4.14.143-118.123.amzn2.x86_64  
    kernel-tools-debuginfo-4.14.143-118.123.amzn2.x86_64  
    kernel-devel-4.14.143-118.123.amzn2.x86_64  
    kernel-debuginfo-4.14.143-118.123.amzn2.x86_64

Additional References

Red Hat: CVE-2018-15594, CVE-2018-9363

Mitre: CVE-2018-15594, CVE-2018-9363

OSVersionArchitecturePackageVersionFilename
Amazon Linux2aarch64kernel< 4.14.143-118.123.amzn2kernel-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64kernel-headers< 4.14.143-118.123.amzn2kernel-headers-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64kernel-debuginfo-common-aarch64< 4.14.143-118.123.amzn2kernel-debuginfo-common-aarch64-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64perf< 4.14.143-118.123.amzn2perf-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64perf-debuginfo< 4.14.143-118.123.amzn2perf-debuginfo-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64python-perf< 4.14.143-118.123.amzn2python-perf-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64python-perf-debuginfo< 4.14.143-118.123.amzn2python-perf-debuginfo-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64kernel-tools< 4.14.143-118.123.amzn2kernel-tools-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64kernel-tools-devel< 4.14.143-118.123.amzn2kernel-tools-devel-4.14.143-118.123.amzn2.aarch64.rpm
Amazon Linux2aarch64kernel-tools-debuginfo< 4.14.143-118.123.amzn2kernel-tools-debuginfo-4.14.143-118.123.amzn2.aarch64.rpm
Rows per page:
1-10 of 251

Related

nessus 61
amazon 2
cvelist 2
ubuntucve 2
debiancve 2
altlinux 1
nvd 2
cve 2
f5 2
prion 2
redhatcve 2
veracode 2
openvas 38
cloudfoundry 4
ubuntu 14
oraclelinux 3
photon 1
osv 3
debian 3
redhat 3
ibm 3
centos 1
suse 3
nessus
nessus
Amazon Linux 2 : kernel (ALAS-2019-1281)
2019-09-20 00:00:00
Amazon Linux AMI : kernel (ALAS-2019-1280)
2019-09-19 00:00:00
Amazon Linux 2 : kernel (ALAS-2019-1280)
2019-09-20 00:00:00
amazon
amazon
Medium: kernel
2019-09-13 22:45:00
Medium: kernel
2019-09-13 23:09:00
cvelist
cvelist
CVE-2018-9363
2018-11-06 17:00:00
CVE-2018-15594
2018-08-20 08:00:00
ubuntucve
ubuntucve
CVE-2018-9363
2018-08-02 00:00:00
CVE-2018-15594
2018-08-20 00:00:00
debiancve
debiancve
CVE-2018-9363
2018-11-06 17:29:00
CVE-2018-15594
2018-08-20 08:29:00
altlinux
altlinux
Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.150-alt0.M80P.1
2018-08-21 00:00:00
nvd
nvd
CVE-2018-9363
2018-11-06 17:29:00
CVE-2018-15594
2018-08-20 08:29:00
cve
cve
CVE-2018-9363
2018-11-06 17:29:00
CVE-2018-15594
2018-08-20 08:29:00
f5
f5
K01821401 : Linux kernel vulnerability CVE-2018-9363
2022-07-21 00:00:00
K26301924 : Linux kernel vulnerability CVE-2018-15594
2019-02-15 00:00:00
prion
prion
Integer overflow
2018-11-06 17:29:00
Code injection
2018-08-20 08:29:00
redhatcve
redhatcve
CVE-2018-9363
2018-08-28 12:53:38
CVE-2018-15594
2020-04-05 16:51:01
veracode
veracode
Denial Of Service (DoS)
2019-08-08 00:07:18
Authorization Bypass
2019-08-08 00:07:16
openvas
openvas
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1372)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1178)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1433)
2020-01-23 00:00:00
cloudfoundry
cloudfoundry
USN-3797-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2018-10-25 00:00:00
USN-3820-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
USN-3777-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2018-10-09 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2018-10-23 00:00:00
Linux kernel (Xenial HWE) vulnerabilities
2018-10-23 00:00:00
Linux kernel (HWE) vulnerabilities
2018-11-14 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2018-09-04 00:00:00
Unbreakable Enterprise kernel security update
2019-01-03 00:00:00
kernel security, bug fix, and enhancement update
2019-08-13 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2018-0180
2018-08-28 00:00:00
osv
osv
linux - security update
2018-10-01 00:00:00
linux-4.9 - security update
2018-10-03 00:00:00
linux - security update
2018-10-03 00:00:00
debian
debian
[SECURITY] [DSA 4308-1] linux security update
2018-10-01 15:21:20
[SECURITY] [DLA 1531-1] linux-4.9 security update
2018-10-03 23:59:07
[SECURITY] [DSA 4308-1] linux security update
2018-10-01 15:21:20
redhat
redhat
(RHSA-2019:2043) Important: kernel-rt security and bug fix update
2019-08-06 07:54:29
(RHSA-2019:2029) Important: kernel security, bug fix, and enhancement update
2019-08-06 07:52:38
(RHSA-2018:2948) Important: kernel-alt security, bug fix, and enhancement update
2018-10-30 08:15:20
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u
2018-12-05 22:20:01
Security Bulletin: IBM QRadar SIEM is vulnerable to multiple Kernel vulnerabilities
2019-11-06 19:05:13
Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018
2019-01-28 17:05:01
centos
centos
bpftool, kernel, perf, python security update
2019-09-10 16:26:50
suse
suse
Security update for the Linux Kernel (important)
2019-05-20 00:00:00
Security update for the Linux Kernel (important)
2018-09-16 15:07:35
Security update for the Linux Kernel (important)
2018-10-08 15:09:43

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

55.3%

JSON
Related for ALAS2-2019-1281
nessus61amazon2cvelist2ubuntucve2debiancve2altlinux1nvd2cve2f52prion2redhatcve2veracode2openvas38cloudfoundry4ubuntu14oraclelinux3photon1osv3debian3redhat3ibm3centos1suse3