Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rosalinuxROSA LABROSA-SA-2023-2097
HistoryFeb 07, 2023 - 10:10 a.m.

Advisory ROSA-SA-2023-2097

2023-02-0710:10:41
ROSA LAB
abf.rosalinux.ru
19
kernel 3.10.0-1160.83.1.el7
rosa-server79
usb driver vulnerability
memory boundaries
gain access
sensitive information
lfence/jmp protection
amd processors

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.975 High

EPSS

Percentile

100.0%

JSON

Software: kernel 3.10.0-1160.83.1.el7
OS: rosa-server79

package_evr_string: 3.10.0-1160.83.1.el7

CVE-ID: CVE-2022-2964
BDU-ID: 2022-05848
CVE-Crit: HIGH
CVE-DESC: A vulnerability in the Linux operating system kernel driver for ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet devices is related to read and write operations outside of memory boundaries. Exploitation of the vulnerability could allow an attacker to gain access to potentially sensitive information.
CVE-STATUS: Resolved
CVE-REV: Execute yum update command to close it

CVE-ID: CVE-2021-26401
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC: LFENCE/JMP may not sufficiently protect against CVE-2017-5715 on some AMD processors.
CVE-STATUS: Fixed
CVE-REV: Run the yum update command to close it

OSVersionArchitecturePackageVersionFilename
rosaanynoarchkernel< 3.10.0UNKNOWN

Related

redhat 28
nessus 77
centos 4
openvas 34
oraclelinux 8
ubuntucve 2
amd 1
cve 3
debiancve 1
prion 2
cvelist 2
f5 2
redhatcve 1
nvd 1
veracode 1
citrix 1
suse 10
mageia 2
alpinelinux 1
ubuntu 5
debian 3
thn 2
osv 3
amazon 1
archlinux 1
vmware 1
cloudfoundry 1
ibm 1
redhat
redhat
(RHSA-2023:0400) Important: kernel-rt security and bug fix update
2023-01-24 09:46:52
(RHSA-2023:0399) Important: kernel security and bug fix update
2023-01-24 09:46:52
(RHSA-2023:0187) Moderate: kernel security update
2023-01-17 08:48:58
nessus
nessus
Scientific Linux Security Update : kernel on SL7.x x86_64 (2023:0399)
2023-01-25 00:00:00
CentOS 7 : kernel-rt (RHSA-2023:0400)
2024-01-09 00:00:00
RHEL 7 : kernel-rt (RHSA-2023:0400)
2023-01-24 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2023-01-30 16:50:20
iwl100, iwl1000, iwl105, iwl135, iwl2000, iwl2030, iwl3160, iwl3945, iwl4965, iwl5000, iwl5150, iwl6000, iwl6000g2a, iwl6000g2b, iwl6050, iwl7260, iwl7265, linux security update
2018-01-04 11:47:37
qemu security update
2018-01-04 21:11:07
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2023:0399)
2023-01-31 00:00:00
RedHat Update for qemu-kvm RHSA-2018:0024-01
2018-01-05 00:00:00
openSUSE: Security Advisory for qemu (openSUSE-SU-2018:0030-1)
2018-01-05 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2023-01-25 00:00:00
kernel security update
2023-10-20 00:00:00
libvirt security update
2018-01-04 00:00:00
ubuntucve
ubuntucve
CVE-2021-26401
2022-03-11 00:00:00
CVE-2017-5715
2018-01-03 00:00:00
amd
amd
LFENCE/JMP Mitigation Update for CVE-2017-5715
2022-03-08 00:00:00
cve
cve
CVE-2021-26401
2022-03-11 18:15:11
CVE-2017-5715
2018-01-04 13:29:00
CVE-2022-2964
2022-09-09 15:15:10
debiancve
debiancve
CVE-2021-26401
2022-03-11 18:15:11
prion
prion
Design/Logic Flaw
2022-03-11 18:15:00
Information disclosure
2018-01-04 13:29:00
cvelist
cvelist
CVE-2021-26401
2022-03-08 00:00:00
CVE-2017-5715
2018-01-03 00:00:00
f5
f5
K000137188 : AMD CPU vulnerability CVE-2021-26401
2023-10-09 00:00:00
K000134670 : Linux kernel vulnerability CVE-2022-2964
2023-05-18 00:00:00
redhatcve
redhatcve
CVE-2021-26401
2022-03-09 10:23:54
nvd
nvd
CVE-2021-26401
2022-03-11 18:15:11
veracode
veracode
Information Disclosure
2022-06-23 22:13:13
citrix
citrix
Citrix Hypervisor Security Update
2022-03-07 14:55:18
suse
suse
Security update for kernel-firmware (important)
2018-01-08 21:12:33
Security update for qemu (important)
2018-01-10 12:07:18
Security update for qemu (important)
2018-01-04 03:07:43
mageia
mageia
Updated microcode packages fix security vulnerabilities
2018-03-19 15:13:14
Updated gcc packages fix security vulnerability
2018-02-08 14:30:47
alpinelinux
alpinelinux
CVE-2017-5715
2018-01-04 13:29:00
ubuntu
ubuntu
AMD Microcode regression
2018-07-05 00:00:00
QEMU update
2018-02-07 00:00:00
Intel Microcode regression
2018-01-22 00:00:00
debian
debian
[SECURITY] [DLA 2743-1] amd64-microcode security update
2021-08-16 07:02:26
[SECURITY] [DSA 4179-1] linux-tools security update
2018-04-24 13:15:06
[SECURITY] [DLA 2743-2] amd64-microcode update
2021-10-18 08:51:43
thn
thn
Intel Admits It Won't Be Possible to Fix Spectre (V2) Flaw in Some Processors
2018-04-04 11:17:00
New Exploit Bypasses Existing Spectre-V2 Mitigations in Intel, AMD, Arm CPUs
2022-03-10 14:29:00
osv
osv
amd64-microcode - security update
2021-08-16 00:00:00
amd64-microcode - security update
2020-03-19 00:00:00
CVE-2017-5715
2018-01-04 13:29:00
amazon
amazon
Important: libvirt
2018-02-07 18:40:00
archlinux
archlinux
[ASA-201801-10] intel-ucode: access restriction bypass
2018-01-10 00:00:00
vmware
vmware
VMware vSphere, Workstation and Fusion updates add Hypervisor-Assisted Guest Mitigations for speculative execution issue.
2018-01-09 00:00:00
cloudfoundry
cloudfoundry
USN-3690-1: AMD Microcode update | Cloud Foundry
2018-07-19 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by a Using Components (microcode_ctl) with Known Vulnerabilities vulnerability
2018-12-19 20:45:01

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.975 High

EPSS

Percentile

100.0%

JSON
Related for ROSA-SA-2023-2097
redhat28nessus77centos4openvas34oraclelinux8ubuntucve2amd1cve3debiancve1prion2cvelist2f52redhatcve1nvd1veracode1citrix1suse10mageia2alpinelinux1ubuntu5debian3thn2osv3amazon1archlinux1vmware1cloudfoundry1ibm1