Lucene search
UbuntuUSN-2805-1HistoryNov 10, 2015 - 12:00 a.m.
Linux kernel (Utopic HWE) vulnerability
2015-11-1000:00:00
ubuntu.com
58
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
31.8%
Releases
- Ubuntu 14.04 ESM
Packages
- linux-lts-utopic - Linux hardware enablement kernel from Utopic
Details
Ben Serebrin discovered that the KVM hypervisor implementation in the Linux
kernel did not properly catch Alignment Check exceptions. An attacker in a
guest virtual machine could use this to cause a denial of service (system
crash) in the host OS.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | linux-image-3.16.0-53-generic | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | block-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | crypto-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | fat-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | fb-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | firewire-core-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | floppy-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | fs-core-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | fs-secondary-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | input-modules-3.16.0-53-generic-di | < 3.16.0-53.72~14.04.1 | UNKNOWN |
References
Related
openvas
openvas
Ubuntu: Security Advisory (USN-2802-1)
2015-11-10 00:00:00
Ubuntu: Security Advisory (USN-2800-1)
2015-11-10 00:00:00
Ubuntu: Security Advisory (USN-2804-1)
2015-11-10 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-2801-1)
2015-11-10 00:00:00
Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerability (USN-2806-1)
2015-11-10 00:00:00
Ubuntu 12.04 LTS : linux vulnerability (USN-2800-1)
2015-11-10 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2015-11-10 00:00:00
Linux kernel (Vivid HWE) vulnerability
2015-11-10 00:00:00
Linux kernel vulnerability
2015-11-10 00:00:00
cvelist
cvelist
CVE-2015-5307
2015-11-16 11:00:00
debiancve
debiancve
CVE-2015-5307
2015-11-16 11:59:05
nvd
nvd
CVE-2015-5307
2015-11-16 11:59:05
cve
cve
CVE-2015-5307
2015-11-16 11:59:05
ubuntucve
ubuntucve
CVE-2015-5307
2015-11-10 00:00:00
prion
prion
Design/Logic Flaw
2015-11-16 11:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.2-2.fc22
2015-11-21 16:55:05
[SECURITY] Fedora 21 Update: xen-4.4.3-8.fc21
2015-11-20 23:26:59
[SECURITY] Fedora 23 Update: xen-4.5.2-2.fc23
2015-11-23 00:30:31
freebsd
freebsd
xen-kernel -- CPU lockup during exception delivery
2015-11-10 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2015-12-10 00:00:00
kernel security and bug fix update
2015-12-08 00:00:00
Unbreakable Enterprise kernel security update
2016-01-08 00:00:00
redhat
redhat
(RHSA-2015:2552) Important: kernel security and bug fix update
2015-12-08 10:11:52
(RHSA-2016:0024) Important: kernel security and bug fix update
2016-01-12 00:00:00
(RHSA-2016:0004) Important: kernel security update
2016-01-07 00:00:00
centos
centos
kernel, perf, python security update
2015-12-09 19:18:47
kernel, perf, python security update
2015-12-16 00:07:51
xen
xen
x86: CPU lockup during exception delivery
2015-11-10 00:01:00
f5
f5
mageia
mageia
Updated kernel packages fix security vulnerabilities
2015-11-20 01:08:19
Updated kernel-linus packages fix security vulnerabilities
2016-01-14 04:44:39
Updated kernel-linus packages fix security vulnerabilities
2016-06-22 22:08:04
debian
debian
[SECURITY] [DSA 3454-1] virtualbox security update
2016-01-26 23:24:54
[SECURITY] [DSA 3396-1] linux security update
2015-11-10 08:08:51
[SECURITY] [DSA 3396-1] linux security update
2015-11-10 08:08:51
osv
osv
linux - security update
2015-11-10 00:00:00
xen - security update
2016-05-17 00:00:00
xen-4.7.0_12-1.3 on GA media
2024-06-15 00:00:00
kaspersky
kaspersky
KLA10744 Multiple vulnerabilities in Oracle VM VirtualBox
2016-02-21 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2015-11-26 13:10:56
Security update for the Linux Kernel (important)
2016-02-05 21:12:31
Security update for the Linux Kernel (important)
2015-12-04 14:10:52
oracle
oracle
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
31.8%
Related for USN-2805-1