Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-15902
HistorySep 04, 2019 - 12:00 a.m.

CVE-2019-15902

2019-09-0400:00:00
ubuntu.com
ubuntu.com
27

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.1%

A backporting error was discovered in the Linux stable/longterm kernel
4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141,
4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream
“x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()” commit
reintroduced the Spectre vulnerability that it aimed to eliminate. This
occurred because the backport process depends on cherry picking specific
commits, and because two (correctly ordered) code lines were swapped.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-66.75UNKNOWN
ubuntu19.04noarchlinux< 5.0.0-32.34UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-166.195UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1052.54UNKNOWN
ubuntu19.04noarchlinux-aws< 5.0.0-1019.21UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1056.60UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1096.107UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1052.54~16.04.1UNKNOWN
ubuntu18.04noarchlinux-azure< 5.0.0-1023.24~18.04.1UNKNOWN
ubuntu19.04noarchlinux-azure< 5.0.0-1023.24UNKNOWN
Rows per page:
1-10 of 381

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.1%