Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2976-1
HistoryMay 16, 2016 - 12:00 a.m.

Linux kernel (Utopic HWE) vulnerability

2016-05-1600:00:00
ubuntu.com
54

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0

Percentile

10.1%

JSON

Releases

  • Ubuntu 14.04 ESM

Packages

  • linux-lts-utopic - Linux hardware enablement kernel from Utopic for Trusty

Details

Philip Pettersson discovered that the Linux kernel’s ASN.1 DER decoder did
not properly process certificate files with tags of indefinite length. A
local unprivileged attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code with administrative
privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlinux-image-3.16.0-71-generic< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchblock-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchcrypto-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchfat-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchfb-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchfirewire-core-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchfloppy-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchfs-core-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchfs-secondary-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Ubuntu14.04noarchinput-modules-3.16.0-71-generic-di< 3.16.0-71.92~14.04.1UNKNOWN
Rows per page:
1-10 of 571

Related

android 1
nessus 45
openvas 37
prion 1
ubuntu 10
nvd 1
veracode 1
cvelist 1
cve 1
redhatcve 1
cloudfoundry 1
oraclelinux 4
hp 2
debiancve 1
redhat 3
ubuntucve 1
centos 1
fedora 3
suse 23
amazon 1
mageia 3
ibm 1
androidsecurity 1
lenovo 1
android
android
CVE-2016-0758
2016-10-01 00:00:00
nessus
nessus
Ubuntu 15.10 : linux-raspi2 vulnerability (USN-2978-3)
2016-05-17 00:00:00
Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-2975-1)
2016-05-17 00:00:00
Scientific Linux Security Update : kernel on SL7.x x86_64 (20160512)
2016-05-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2975-2)
2016-05-17 00:00:00
CentOS Update for kernel CESA-2016:1033 centos7
2016-05-17 00:00:00
Ubuntu: Security Advisory (USN-2977-1)
2016-05-17 00:00:00
prion
prion
Integer overflow
2016-06-27 10:59:00
ubuntu
ubuntu
Linux kernel (Trusty HWE) vulnerability
2016-05-16 00:00:00
Linux kernel (Raspberry Pi 2) vulnerability
2016-05-16 00:00:00
Linux kernel (Raspberry Pi 2) vulnerability
2016-05-16 00:00:00
nvd
nvd
CVE-2016-0758
2016-06-27 10:59:02
veracode
veracode
Privilege Escalation
2019-01-15 09:11:38
cvelist
cvelist
CVE-2016-0758
2016-06-27 10:00:00
cve
cve
CVE-2016-0758
2016-06-27 10:59:02
redhatcve
redhatcve
CVE-2016-0758
2016-05-12 07:18:20
cloudfoundry
cloudfoundry
USN-2977-1 Linux kernel (Vivid HWE) vulnerabilities | Cloud Foundry
2016-05-19 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2016-05-12 00:00:00
Unbreakable Enterprise kernel security update
2016-05-16 00:00:00
kernel security and bug fix update
2016-06-23 00:00:00
hp
hp
HPSBHF3548 rev.2 - Linux Kernel Flaw, ASN.1 DER decoder for x509 certificate DER files
2016-06-01 00:00:00
HPSBHF03436 rev.2 - HP Thin Client with ThinPro OS, running Linux, Local Elevated Privileges
2016-02-26 00:00:00
debiancve
debiancve
CVE-2016-0758
2016-06-27 10:59:02
redhat
redhat
(RHSA-2016:1051) Important: kernel-rt security, bug fix, and enhancement update
2016-05-12 07:29:41
(RHSA-2016:1055) Important: kernel-rt security and bug fix update
2016-05-12 07:36:33
(RHSA-2016:1033) Important: kernel security and bug fix update
2016-05-12 07:29:32
ubuntucve
ubuntucve
CVE-2016-0758
2016-05-12 00:00:00
centos
centos
kernel, perf, python security update
2016-05-13 00:44:04
fedora
fedora
[SECURITY] Fedora 24 Update: kernel-4.5.5-300.fc24
2016-05-24 18:08:16
[SECURITY] Fedora 22 Update: kernel-4.4.10-200.fc22
2016-05-25 00:54:31
[SECURITY] Fedora 23 Update: kernel-4.5.5-201.fc23
2016-06-02 15:04:03
suse
suse
Security update for Linux Kernel Live Patch 6 for SLE 12 SP1 (important)
2016-08-09 17:34:25
Security update for Linux Kernel Live Patch 5 for SLE 12 SP1 (important)
2016-08-09 17:22:29
Security update for Linux Kernel Live Patch 13 for SLE 12 (important)
2016-08-09 17:19:35
amazon
amazon
Medium: kernel
2016-05-18 14:00:00
mageia
mageia
Update request kernel-linus-4.4.26-1 fixes security issues
2016-11-04 10:58:56
Updated kernel packages fix security vulnerabilities
2016-06-13 18:55:41
Updated kernel-tmb packages fix security vulnerabilities
2016-06-22 22:08:04
ibm
ibm
Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM
2018-06-18 01:33:24
androidsecurity
androidsecurity
Android Security Bulletin—October 2016
2016-10-03 00:00:00
lenovo
lenovo
AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US
2020-04-13 19:22:04

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0

Percentile

10.1%

JSON
Related for USN-2976-1
android1nessus45openvas37prion1ubuntu10nvd1veracode1cvelist1cve1redhatcve1cloudfoundry1oraclelinux4hp2debiancve1redhat3ubuntucve1centos1fedora3suse23amazon1mageia3ibm1androidsecurity1lenovo1