Oval Definition:	oval:com.ubuntu.bionic:def:20162853000
Revision Date: 2016-05-02 Version: 1 Title: CVE-2016-2853 on Ubuntu 18.04 LTS (bionic) - low. Description: The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program. Family: unix Class: vulnerability Status: Reference(s): CVE-2016-2853 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-aws' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-azure' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-azure-edge' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-gcp-edge' package in bionic is not affected. OR NOT While related to the CVE in some way, the 'linux-hwe' package in bionic is not affected. OR The vulnerability of the 'linux-hwe-edge' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR NOT While related to the CVE in some way, the 'linux-kvm' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-oem' package in bionic is not affected (note: 'imported aufs with fix'). OR NOT While related to the CVE in some way, the 'linux-oracle' package in bionic is not affected. OR NOT While related to the CVE in some way, the 'linux-raspi2' package in bionic is not affected.
BACK