Lucene search
UbuntuUSN-5916-1HistoryMar 03, 2023 - 12:00 a.m.
Linux kernel vulnerability
2023-03-0300:00:00
ubuntu.com
72
linux kernel
ubuntu 14.04 esm
memory allocation
denial of service
arbitrary code execution
local attacker
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Releases
- Ubuntu 14.04 ESM
Packages
- linux - Linux kernel
Details
Jann Horn discovered that the Linux kernel did not properly track memory
allocations for anonymous VMA mappings in some situations, leading to
potential data structure reuse. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | linux-image-server | < 3.13.0.192.202 | UNKNOWN |
| Ubuntu | 14.04 | noarch | hv-kvp-daemon-init | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-cloud-tools-generic | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-cloud-tools-lowlatency | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-cloud-tools-virtual | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-crashdump | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-generic | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-generic-lts-quantal | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-generic-lts-quantal-eol-upgrade | < 3.13.0.170.181 | UNKNOWN |
| Ubuntu | 14.04 | noarch | linux-generic-lts-raring | < 3.13.0.170.181 | UNKNOWN |
References
Related
cve
cve
CVE-2022-42703
2022-10-09 23:15:09
cvelist
cvelist
CVE-2022-42703
2022-10-09 00:00:00
osv
osv
Linux kernel vulnerability advisory
2023-07-01 00:00:00
linux vulnerability
2023-03-03 00:59:06
linux-azure, linux-azure-5.4 vulnerabilities
2022-12-12 13:44:43
googleprojectzero
googleprojectzero
Exploiting CVE-2022-42703 - Bringing back the stack attack
2022-12-08 00:00:00
DER Entitlements: The (Brief) Return of the Psychic Paper
2023-01-12 00:00:00
Mind the Gap
2022-11-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-19 14:27:21
prion
prion
Design/Logic Flaw
2022-10-09 23:15:00
cbl_mariner
cbl_mariner
CVE-2022-42703 affecting package kernel for versions less than 5.15.74.1-3
2022-11-03 20:38:13
CVE-2022-42703 affecting package kernel 5.10.145.1-1
2022-11-03 00:45:13
debiancve
debiancve
CVE-2022-42703
2022-10-09 23:15:09
redhatcve
redhatcve
CVE-2022-42703
2022-10-13 20:01:39
cnvd
cnvd
Linux kernel resource management error vulnerability (CNVD-2022-69186)
2022-10-12 00:00:00
ubuntucve
ubuntucve
CVE-2022-42703
2022-10-09 00:00:00
githubexploit
githubexploit
Exploit for Use After Free in Linux Linux Kernel
2023-10-06 06:18:32
openvas
openvas
Ubuntu: Security Advisory (USN-5916-1)
2023-03-06 00:00:00
CentOS: Security Advisory for bpftool (CESA-2023:1091)
2023-03-09 00:00:00
Mageia: Security Advisory (MGASA-2022-0324)
2022-09-12 00:00:00
nvd
nvd
CVE-2022-42703
2022-10-09 23:15:09
f5
f5
K000134770 : Linux kernel vulnerability CVE-2022-42703
2023-05-25 00:00:00
nessus
nessus
SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 29 for SLE 12 SP4) (SUSE-SU-2022:4030-1)
2022-11-17 00:00:00
RHEL 7 : kernel (RHSA-2023:1091)
2023-03-07 00:00:00
Oracle Linux 7 : kernel (ELSA-2023-1091)
2023-03-08 00:00:00
redhat
redhat
(RHSA-2023:1092) Important: kernel-rt security and bug fix update
2023-03-07 08:56:13
(RHSA-2023:1091) Important: kernel security and bug fix update
2023-03-07 08:56:12
(RHSA-2023:3388) Important: kernel security, bug fix, and enhancement update
2023-05-31 15:29:59
oraclelinux
oraclelinux
kernel security and bug fix update
2023-03-08 00:00:00
kernel security, bug fix, and enhancement update
2023-05-23 00:00:00
kernel security, bug fix, and enhancement update
2023-05-15 00:00:00
ibm
ibm
centos
centos
bpftool, kernel, perf, python security update
2023-03-08 16:36:50
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-09-10 23:26:43
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
ubuntu
ubuntu
Linux kernel (GKE) vulnerabilities
2022-12-02 00:00:00
Linux kernel vulnerabilities
2022-12-01 00:00:00
Linux kernel (Azure) vulnerabilities
2022-12-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0477
2022-10-26 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0248
2022-09-20 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-11-08 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-05-16 00:00:00
Important: kernel-rt security and bug fix update
2023-05-16 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-05-09 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-11-29 21:04:28
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for USN-5916-1