usn-3469-1
Vulnerability from osv_ubuntu
Published
2017-10-31 10:25
Modified
2026-04-22 07:36
Summary
linux, linux-aws, linux-gke, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Details
Anthony Perard discovered that the Xen virtual block driver did not properly initialize some data structures before passing them to user space. A local attacker in a guest VM could use this to expose sensitive information from the host OS or other guest VMs. (CVE-2017-10911)
Bo Zhang discovered that the netlink wireless configuration interface in the Linux kernel did not properly validate attributes when handling certain requests. A local attacker with the CAP_NET_ADMIN could use this to cause a denial of service (system crash). (CVE-2017-12153)
It was discovered that the nested KVM implementation in the Linux kernel in some situations did not properly prevent second level guests from reading and writing the hardware CR8 register. A local attacker in a guest could use this to cause a denial of service (system crash).
It was discovered that the key management subsystem in the Linux kernel did not properly restrict key reads on negatively instantiated keys. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-12192)
It was discovered that an integer overflow existed in the sysfs interface for the QLogic 24xx+ series SCSI driver in the Linux kernel. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2017-14051)
It was discovered that the ATI Radeon framebuffer driver in the Linux kernel did not properly initialize a data structure returned to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-14156)
Dave Chinner discovered that the XFS filesystem did not enforce that the realtime inode flag was settable only on filesystems on a realtime device. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-14340)
ChunYu Wang discovered that the iSCSI transport implementation in the Linux kernel did not properly validate data structures. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-14489)
It was discovered that the generic SCSI driver in the Linux kernel did not properly initialize data returned to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-14991)
Dmitry Vyukov discovered that the Floating Point Unit (fpu) subsystem in the Linux kernel did not properly handle attempts to set reserved bits in a task's extended state (xstate) area. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-15537)
Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer. A local attacker could use this to cause a denial of service (infinite loop). (CVE-2017-9984, CVE-2017-9985)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2017-9984",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9985",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-10911",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12153",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12154",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12192",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14051",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14156",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14340",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14991",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15537",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "block-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "block-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "block-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "block-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "block-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "crypto-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "crypto-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "crypto-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "crypto-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "crypto-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "dasd-extra-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "dasd-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fat-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fat-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fat-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fat-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fat-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fb-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "firewire-core-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "firewire-core-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "firewire-core-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "firewire-core-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "floppy-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "floppy-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "floppy-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "floppy-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-core-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-core-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-core-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-core-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-core-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-secondary-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-secondary-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-secondary-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-secondary-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "fs-secondary-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "input-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "input-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "input-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "input-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "input-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ipmi-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ipmi-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ipmi-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ipmi-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ipmi-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "irda-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "irda-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "irda-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "irda-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "irda-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "kernel-image-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "kernel-image-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "kernel-image-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "kernel-image-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "kernel-image-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-cloud-tools-4.4.0-98",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-cloud-tools-4.4.0-98-generic",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-cloud-tools-4.4.0-98-lowlatency",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-generic",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-generic-lpae",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-lowlatency",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-powerpc-e500mc",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-powerpc-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-powerpc64-emb",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-headers-4.4.0-98-powerpc64-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-generic",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-generic-lpae",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-lowlatency",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-powerpc-e500mc",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-powerpc-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-powerpc64-emb",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-4.4.0-98-powerpc64-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-image-extra-4.4.0-98-generic",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-source-4.4.0",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-generic",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-generic-lpae",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-lowlatency",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-powerpc-e500mc",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-powerpc-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-powerpc64-emb",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-4.4.0-98-powerpc64-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-tools-common",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-udebs-generic-lpae",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-udebs-powerpc-e500mc",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-udebs-powerpc-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "linux-udebs-powerpc64-smp",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "md-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "md-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "md-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "md-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "md-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "message-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "message-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "message-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "message-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "mouse-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "mouse-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "mouse-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "mouse-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "mouse-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "multipath-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "multipath-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "multipath-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "multipath-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "multipath-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nfs-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nfs-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nfs-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nfs-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nfs-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-pcmcia-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-shared-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-shared-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-shared-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-shared-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-shared-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-usb-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-usb-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-usb-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-usb-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "nic-usb-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "parport-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "parport-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "parport-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "parport-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "parport-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "pata-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "pata-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "pata-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "pata-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "pcmcia-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "pcmcia-storage-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "plip-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "plip-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "plip-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "plip-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "plip-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ppp-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ppp-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ppp-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ppp-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "ppp-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "sata-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "sata-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "sata-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "sata-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "sata-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "scsi-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "scsi-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "scsi-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "scsi-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "scsi-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "serial-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "speakup-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "speakup-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "speakup-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "speakup-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "speakup-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "storage-core-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "storage-core-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "storage-core-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "storage-core-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "storage-core-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "usb-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "usb-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "usb-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "usb-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "usb-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "virtio-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "virtio-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "virtio-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "virtio-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "vlan-modules-4.4.0-98-generic-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "vlan-modules-4.4.0-98-generic-lpae-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "vlan-modules-4.4.0-98-powerpc-e500mc-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "vlan-modules-4.4.0-98-powerpc-smp-di",
"binary_version": "4.4.0-98.121"
},
{
"binary_name": "vlan-modules-4.4.0-98-powerpc64-smp-di",
"binary_version": "4.4.0-98.121"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@4.4.0-98.121?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.0-98.121"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.2.0-16.19",
"4.2.0-17.21",
"4.2.0-19.23",
"4.3.0-1.10",
"4.3.0-2.11",
"4.3.0-5.16",
"4.3.0-6.17",
"4.3.0-7.18",
"4.4.0-2.16",
"4.4.0-4.19",
"4.4.0-6.21",
"4.4.0-7.22",
"4.4.0-8.23",
"4.4.0-9.24",
"4.4.0-10.25",
"4.4.0-11.26",
"4.4.0-12.28",
"4.4.0-13.29",
"4.4.0-14.30",
"4.4.0-15.31",
"4.4.0-16.32",
"4.4.0-17.33",
"4.4.0-18.34",
"4.4.0-21.37",
"4.4.0-22.39",
"4.4.0-22.40",
"4.4.0-24.43",
"4.4.0-28.47",
"4.4.0-31.50",
"4.4.0-34.53",
"4.4.0-36.55",
"4.4.0-38.57",
"4.4.0-42.62",
"4.4.0-43.63",
"4.4.0-45.66",
"4.4.0-47.68",
"4.4.0-51.72",
"4.4.0-53.74",
"4.4.0-57.78",
"4.4.0-59.80",
"4.4.0-62.83",
"4.4.0-63.84",
"4.4.0-64.85",
"4.4.0-65.86",
"4.4.0-66.87",
"4.4.0-67.88",
"4.4.0-70.91",
"4.4.0-71.92",
"4.4.0-72.93",
"4.4.0-75.96",
"4.4.0-77.98",
"4.4.0-78.99",
"4.4.0-79.100",
"4.4.0-81.104",
"4.4.0-83.106",
"4.4.0-87.110",
"4.4.0-89.112",
"4.4.0-91.114",
"4.4.0-92.115",
"4.4.0-93.116",
"4.4.0-96.119",
"4.4.0-97.120"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2017-9984",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9985",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-10911",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12153",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12154",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12192",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14051",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14156",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14340",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14991",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15537",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-4.4.0-1039",
"binary_version": "4.4.0-1039.48"
},
{
"binary_name": "linux-aws-headers-4.4.0-1039",
"binary_version": "4.4.0-1039.48"
},
{
"binary_name": "linux-aws-tools-4.4.0-1039",
"binary_version": "4.4.0-1039.48"
},
{
"binary_name": "linux-cloud-tools-4.4.0-1039-aws",
"binary_version": "4.4.0-1039.48"
},
{
"binary_name": "linux-headers-4.4.0-1039-aws",
"binary_version": "4.4.0-1039.48"
},
{
"binary_name": "linux-image-4.4.0-1039-aws",
"binary_version": "4.4.0-1039.48"
},
{
"binary_name": "linux-tools-4.4.0-1039-aws",
"binary_version": "4.4.0-1039.48"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@4.4.0-1039.48?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.0-1039.48"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.4.0-1001.10",
"4.4.0-1003.12",
"4.4.0-1004.13",
"4.4.0-1007.16",
"4.4.0-1009.18",
"4.4.0-1011.20",
"4.4.0-1012.21",
"4.4.0-1013.22",
"4.4.0-1016.25",
"4.4.0-1017.26",
"4.4.0-1018.27",
"4.4.0-1020.29",
"4.4.0-1022.31",
"4.4.0-1026.35",
"4.4.0-1028.37",
"4.4.0-1030.39",
"4.4.0-1031.40",
"4.4.0-1032.41",
"4.4.0-1035.44",
"4.4.0-1037.46",
"4.4.0-1038.47"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2017-9984",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9985",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-10911",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12153",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12154",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12192",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14051",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14156",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14340",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14991",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15537",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-cloud-tools-4.4.0-1033-gke",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-gke-cloud-tools-4.4.0-1033",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-gke-headers-4.4.0-1033",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-gke-tools-4.4.0-1033",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-headers-4.4.0-1033-gke",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-image-4.4.0-1033-gke",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-image-extra-4.4.0-1033-gke",
"binary_version": "4.4.0-1033.33"
},
{
"binary_name": "linux-tools-4.4.0-1033-gke",
"binary_version": "4.4.0-1033.33"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@4.4.0-1033.33?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.0-1033.33"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.4.0-1003.3",
"4.4.0-1005.6",
"4.4.0-1006.6",
"4.4.0-1008.8",
"4.4.0-1009.9",
"4.4.0-1010.10",
"4.4.0-1012.12",
"4.4.0-1013.13",
"4.4.0-1014.14",
"4.4.0-1016.16",
"4.4.0-1018.18",
"4.4.0-1022.22",
"4.4.0-1024.24",
"4.4.0-1026.26",
"4.4.0-1027.27",
"4.4.0-1028.28",
"4.4.0-1031.31",
"4.4.0-1032.32"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2017-9984",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9985",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-10911",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12153",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12154",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12192",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14051",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14156",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14340",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14991",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15537",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-cloud-tools-4.4.0-1009-kvm",
"binary_version": "4.4.0-1009.14"
},
{
"binary_name": "linux-headers-4.4.0-1009-kvm",
"binary_version": "4.4.0-1009.14"
},
{
"binary_name": "linux-image-4.4.0-1009-kvm",
"binary_version": "4.4.0-1009.14"
},
{
"binary_name": "linux-kvm-cloud-tools-4.4.0-1009",
"binary_version": "4.4.0-1009.14"
},
{
"binary_name": "linux-kvm-headers-4.4.0-1009",
"binary_version": "4.4.0-1009.14"
},
{
"binary_name": "linux-kvm-tools-4.4.0-1009",
"binary_version": "4.4.0-1009.14"
},
{
"binary_name": "linux-tools-4.4.0-1009-kvm",
"binary_version": "4.4.0-1009.14"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-kvm",
"purl": "pkg:deb/ubuntu/linux-kvm@4.4.0-1009.14?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.0-1009.14"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.4.0-1004.9",
"4.4.0-1007.12",
"4.4.0-1008.13"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2017-9984",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9985",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-10911",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12153",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12154",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12192",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14051",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14156",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14340",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14991",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15537",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-headers-4.4.0-1076-raspi2",
"binary_version": "4.4.0-1076.84"
},
{
"binary_name": "linux-image-4.4.0-1076-raspi2",
"binary_version": "4.4.0-1076.84"
},
{
"binary_name": "linux-raspi2-headers-4.4.0-1076",
"binary_version": "4.4.0-1076.84"
},
{
"binary_name": "linux-raspi2-tools-4.4.0-1076",
"binary_version": "4.4.0-1076.84"
},
{
"binary_name": "linux-tools-4.4.0-1076-raspi2",
"binary_version": "4.4.0-1076.84"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-raspi2",
"purl": "pkg:deb/ubuntu/linux-raspi2@4.4.0-1076.84?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.0-1076.84"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.2.0-1013.19",
"4.2.0-1014.21",
"4.3.0-1006.6",
"4.4.0-1003.4",
"4.4.0-1004.5",
"4.4.0-1009.10",
"4.4.0-1010.12",
"4.4.0-1010.13",
"4.4.0-1012.16",
"4.4.0-1016.22",
"4.4.0-1017.23",
"4.4.0-1019.25",
"4.4.0-1021.27",
"4.4.0-1023.29",
"4.4.0-1027.33",
"4.4.0-1029.36",
"4.4.0-1034.41",
"4.4.0-1038.45",
"4.4.0-1040.47",
"4.4.0-1042.49",
"4.4.0-1044.51",
"4.4.0-1046.53",
"4.4.0-1048.55",
"4.4.0-1050.57",
"4.4.0-1051.58",
"4.4.0-1052.59",
"4.4.0-1054.61",
"4.4.0-1055.62",
"4.4.0-1057.64",
"4.4.0-1059.67",
"4.4.0-1061.69",
"4.4.0-1065.73",
"4.4.0-1067.75",
"4.4.0-1069.77",
"4.4.0-1070.78",
"4.4.0-1071.79",
"4.4.0-1074.82",
"4.4.0-1075.83"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2017-9984",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9985",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-10911",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12153",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12154",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12192",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14051",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14156",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14340",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14991",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15537",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-headers-4.4.0-1078-snapdragon",
"binary_version": "4.4.0-1078.83"
},
{
"binary_name": "linux-image-4.4.0-1078-snapdragon",
"binary_version": "4.4.0-1078.83"
},
{
"binary_name": "linux-snapdragon-headers-4.4.0-1078",
"binary_version": "4.4.0-1078.83"
},
{
"binary_name": "linux-snapdragon-tools-4.4.0-1078",
"binary_version": "4.4.0-1078.83"
},
{
"binary_name": "linux-tools-4.4.0-1078-snapdragon",
"binary_version": "4.4.0-1078.83"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-snapdragon",
"purl": "pkg:deb/ubuntu/linux-snapdragon@4.4.0-1078.83?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.0-1078.83"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.4.0-1012.12",
"4.4.0-1013.14",
"4.4.0-1013.15",
"4.4.0-1015.18",
"4.4.0-1019.22",
"4.4.0-1020.23",
"4.4.0-1022.25",
"4.4.0-1024.27",
"4.4.0-1026.29",
"4.4.0-1030.33",
"4.4.0-1032.36",
"4.4.0-1035.39",
"4.4.0-1039.43",
"4.4.0-1042.46",
"4.4.0-1044.48",
"4.4.0-1046.50",
"4.4.0-1047.51",
"4.4.0-1048.52",
"4.4.0-1050.54",
"4.4.0-1051.55",
"4.4.0-1053.57",
"4.4.0-1054.58",
"4.4.0-1055.59",
"4.4.0-1057.61",
"4.4.0-1058.62",
"4.4.0-1059.63",
"4.4.0-1061.66",
"4.4.0-1063.68",
"4.4.0-1067.72",
"4.4.0-1069.74",
"4.4.0-1071.76",
"4.4.0-1072.77",
"4.4.0-1073.78",
"4.4.0-1076.81",
"4.4.0-1077.82"
]
}
],
"aliases": [],
"details": "Anthony Perard discovered that the Xen virtual block driver did not\nproperly initialize some data structures before passing them to user space.\nA local attacker in a guest VM could use this to expose sensitive\ninformation from the host OS or other guest VMs. (CVE-2017-10911)\n\nBo Zhang discovered that the netlink wireless configuration interface in\nthe Linux kernel did not properly validate attributes when handling certain\nrequests. A local attacker with the CAP_NET_ADMIN could use this to cause a\ndenial of service (system crash). (CVE-2017-12153)\n\nIt was discovered that the nested KVM implementation in the Linux\nkernel in some situations did not properly prevent second level guests\nfrom reading and writing the hardware CR8 register. A local attacker\nin a guest could use this to cause a denial of service (system crash).\n\nIt was discovered that the key management subsystem in the Linux kernel\ndid not properly restrict key reads on negatively instantiated keys. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2017-12192)\n\nIt was discovered that an integer overflow existed in the sysfs interface\nfor the QLogic 24xx+ series SCSI driver in the Linux kernel. A local\nprivileged attacker could use this to cause a denial of service (system\ncrash). (CVE-2017-14051)\n\nIt was discovered that the ATI Radeon framebuffer driver in the Linux\nkernel did not properly initialize a data structure returned to user space.\nA local attacker could use this to expose sensitive information (kernel\nmemory). (CVE-2017-14156)\n\nDave Chinner discovered that the XFS filesystem did not enforce that the\nrealtime inode flag was settable only on filesystems on a realtime device.\nA local attacker could use this to cause a denial of service (system\ncrash). (CVE-2017-14340)\n\nChunYu Wang discovered that the iSCSI transport implementation in the Linux\nkernel did not properly validate data structures. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2017-14489)\n\nIt was discovered that the generic SCSI driver in the Linux kernel did not\nproperly initialize data returned to user space in some situations. A local\nattacker could use this to expose sensitive information (kernel memory).\n(CVE-2017-14991)\n\nDmitry Vyukov discovered that the Floating Point Unit (fpu) subsystem in\nthe Linux kernel did not properly handle attempts to set reserved bits in a\ntask\u0027s extended state (xstate) area. A local attacker could use this to\ncause a denial of service (system crash). (CVE-2017-15537)\n\nPengfei Wang discovered that the Turtle Beach MultiSound audio device\ndriver in the Linux kernel contained race conditions when fetching\nfrom the ring-buffer. A local attacker could use this to cause a\ndenial of service (infinite loop). (CVE-2017-9984, CVE-2017-9985)\n",
"id": "USN-3469-1",
"modified": "2026-04-22T07:36:34Z",
"published": "2017-10-31T10:25:13Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-3469-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9984"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9985"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-10911"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12153"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12154"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12192"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14051"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14156"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14340"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14489"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14991"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15537"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "linux, linux-aws, linux-gke, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities",
"upstream": [
"UBUNTU-CVE-2017-9984",
"UBUNTU-CVE-2017-9985",
"UBUNTU-CVE-2017-10911",
"UBUNTU-CVE-2017-12153",
"UBUNTU-CVE-2017-12154",
"UBUNTU-CVE-2017-12192",
"UBUNTU-CVE-2017-14051",
"UBUNTU-CVE-2017-14156",
"UBUNTU-CVE-2017-14340",
"UBUNTU-CVE-2017-14489",
"UBUNTU-CVE-2017-14991",
"UBUNTU-CVE-2017-15537"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…