p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de linux-gcp · Página 15

Vulnerabilidades publicadas para linux-gcp en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 655

  1. USN-4115-2

    Sin evaluarCorrección disponible

    linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2 regression

    USN 4115-1 fixed vulnerabilities in the Linux 4.15 kernel for Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. Unfortunately, as part of the update, a regression was introduced that caused a kernel crash when handling fragmented packets in some situations. This update addresses the issue. We apologize for the inconvenience. Original advisory details: Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2018-19985) Zhipeng Xie discovered that an i

    • Actualiza a 4.15.0-1042.44
    Publicación Actualización
  2. CVE-2019-9453

    Media · CVSS 4.4EPSS 0,18%Corrección disponible

    CVE-2019-9453

    In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1041.43
    Publicación Actualización
  3. CVE-2019-9445

    Media · CVSS 4.4EPSS 0,27%Corrección disponible

    CVE-2019-9445

    In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1084.95~16.04.1
    Publicación Actualización
  4. CVE-2019-9444

    Media · CVSS 4.4EPSS 0,2%Corrección disponible

    CVE-2019-9444

    In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1014.14~16.04.1
    Publicación Actualización
  5. CVE-2019-9245

    Media · CVSS 4.4EPSS 0,18%Corrección disponible

    CVE-2019-9245

    In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1041.43
    Publicación Actualización
  6. CVE-2019-9458

    Alta · CVSS 7.3EPSS 0,17%Corrección disponible

    CVE-2019-9458

    In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1040.42~16.04.1
    Publicación Actualización
  7. CVE-2019-9456

    Media · CVSS 6.7EPSS 0,2%Corrección disponible

    CVE-2019-9456

    In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1014.14~16.04.1
    Publicación Actualización
  8. CVE-2019-9454

    Media · CVSS 6.7EPSS 0,18%Corrección disponible

    CVE-2019-9454

    In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1014.14~16.04.1
    Publicación Actualización
  9. CVE-2019-2182

    Alta · CVSS 7.8EPSS 0,22%Corrección disponible

    CVE-2019-2182

    In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

    • Actualiza a 4.15.0-1058.62
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →