Oval Definition:	oval:com.ubuntu.bionic:def:20193887000
Revision Date: 2019-04-09 Version: 1 Title: CVE-2019-3887 on Ubuntu 18.04 LTS (bionic) - medium. Description: A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-3887 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in bionic is not affected (note: '4.13.0-16.19'). OR NOT While related to the CVE in some way, the 'linux-aws' package in bionic is not affected (note: '4.15.0-1001.1'). OR The 'linux-azure' package in bionic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1017.17~18.04.1'). OR The 'linux-azure-edge' package in bionic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1017.17~18.04.1'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in bionic is not affected (note: '4.15.0-1001.1'). OR The 'linux-gcp-edge' package in bionic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1010.11~18.04.1'). OR NOT While related to the CVE in some way, the 'linux-gke' package in bionic is not affected. OR The 'linux-hwe' package in bionic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-19.20~18.04.1'). OR NOT While related to the CVE in some way, the 'linux-hwe-edge' package in bionic is not affected (note: '5.0.0-14.15~18.04.1'). OR NOT While related to the CVE in some way, the 'linux-kvm' package in bionic is not affected (note: '4.15.0-1002.2'). OR NOT While related to the CVE in some way, the 'linux-oem' package in bionic is not affected (note: '4.15.0-1002.3'). OR NOT While related to the CVE in some way, the 'linux-oracle' package in bionic is not affected (note: '4.15.0-1007.9'). OR NOT While related to the CVE in some way, the 'linux-raspi2' package in bionic is not affected (note: '4.13.0-1005.5'). OR NOT While related to the CVE in some way, the 'linux-snapdragon' package in bionic is not affected (note: '4.4.0-1077.82').
BACK