Summary
It was discovered that the netlink 802.11 configuration interface in the
Linux kernel did not properly validate some attributes passed from
userspace. A local attacker with the CAP_NET_ADMIN privilege could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2017-11089)
It was discovered that a buffer overflow existed in the ioctl handling code
in the ISDN subsystem of the Linux kernel. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2017-12762)
It was discovered that the netfilter component of the Linux did not
properly restrict access to the connection tracking helpers list. A local
attacker could use this to bypass intended access restrictions.
(CVE-2017-17448)
Dmitry Vyukov discovered that the KVM implementation in the Linux kernel
contained an out-of-bounds read when handling memory-mapped I/O. A local
attacker could use this to expose sensitive information. (CVE-2017-17741)
It was discovered that the Salsa20 encryption algorithm implementations in
the Linux kernel did not properly handle zero-length inputs. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2017-17805)
It was discovered that the keyring implementation in the Linux kernel did
not properly check permissions when a key request was performed on a
task's default keyring. A local attacker could use this to add keys to
unauthorized keyrings. (CVE-2017-17807)
It was discovered that the Broadcom NetXtremeII ethernet driver in the
Linux kernel did not properly validate Generic Segment Offload (GSO) packet
sizes. An attacker could use this to cause a denial of service (interface
unavailability). (CVE-2018-1000026)
It was discovered that the Reliable Datagram Socket (RDS) implementation in
the Linux kernel contained an out-of-bounds write during RDMA page
allocation. An attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code. (CVE-2018-5332)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux | 3.13.0-144.193 |
Vulnerabilities 8
-
Unscored —
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffe…
-
Unscored —
In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy w…
-
Unscored —
net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for…
-
Unscored —
The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information …
-
Unscored —
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowi…
-
Unscored —
The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current t…
-
Unscored —
Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnera…
-
Unscored —
In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA…
References
-
report
https://ubuntu.com/security/CVE-2017-11089
-
report
https://ubuntu.com/security/CVE-2017-12762
-
report
https://ubuntu.com/security/CVE-2017-17448
-
report
https://ubuntu.com/security/CVE-2017-17741
-
report
https://ubuntu.com/security/CVE-2017-17805
-
report
https://ubuntu.com/security/CVE-2017-17807
-
report
https://ubuntu.com/security/CVE-2018-5332
-
report
https://ubuntu.com/security/CVE-2018-1000026