Linux kernel (Utopic HWE) vulnerability

2015-09-2900:00:00

ubuntu.com

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

Releases

Ubuntu 14.04 ESM

Packages

linux-lts-utopic - Linux hardware enablement kernel from Utopic

Details

It was discovered that an integer overflow error existed in the SCSI
generic (sg) driver in the Linux kernel. A local attacker with write
permission to a SCSI generic device could use this to cause a denial of
service (system crash) or potentially escalate their privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlinux-image-3.16.0-50-generic< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchblock-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchcrypto-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchfat-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchfb-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchfirewire-core-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchfloppy-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchfs-core-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchfs-secondary-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN
Ubuntu14.04noarchinput-modules-3.16.0-50-generic-di< 3.16.0-50.66~14.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	linux-image-3.16.0-50-generic	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	block-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	crypto-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	fat-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	fb-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	firewire-core-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	floppy-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	fs-core-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	fs-secondary-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN
Ubuntu	14.04	noarch	input-modules-3.16.0-50-generic-di	< 3.16.0-50.66~14.04.1	UNKNOWN