Oval Definition:oval:com.ubuntu.bionic:def:20152877000
Revision Date:2017-03-03Version:1
Title:CVE-2015-2877 on Ubuntu 18.04 LTS (bionic) - low.
Description:** DISPUTED ** Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack. NOTE: the vendor states "Basically if you care about this attack vector, disable deduplication." Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure, and can be classified as potentially misunderstood behaviors rather than vulnerabilities.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-2877
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND Package Information
  • The 'linux' package in bionic is affected, but a decision has been made to defer addressing it (note: '2018-10-01').
  • OR The 'linux-aws' package in bionic is affected, but a decision has been made to defer addressing it (note: '2018-10-01').
  • OR The 'linux-azure' package in bionic is affected, but a decision has been made to defer addressing it (note: '2018-10-01').
  • OR The 'linux-azure-edge' package in bionic is affected, but a decision has been made to defer addressing it (note: '2018-10-01').
  • OR The 'linux-gcp' package in bionic is affected, but a decision has been made to defer addressing it (note: '2018-10-01').
  • OR The vulnerability of the 'linux-hwe-edge' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
  • OR The 'linux-kvm' package in bionic is affected, but a decision has been made to defer addressing it (note: '2018-10-01').
  • OR The 'linux-oem' package in bionic is affected, but a decision has been made to defer addressing it.
  • OR The 'linux-raspi2' package in bionic is affected, but a decision has been made to defer addressing it.
  • BACK