Oval Definition:	oval:com.ubuntu.cosmic:def:201713168000
Revision Date: 2017-12-06 Version: 1 Title: CVE-2017-13168 on Ubuntu 18.10 (cosmic) - medium. Description: An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-13168 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in cosmic is not affected (note: '4.17.0-6.7'). OR NOT While related to the CVE in some way, the 'linux-aws' package in cosmic is not affected (note: '4.18.0-1002.3'). OR NOT While related to the CVE in some way, the 'linux-azure' package in cosmic is not affected (note: '4.18.0-1003.3'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in cosmic is not affected (note: '4.18.0-1002.3'). OR NOT While related to the CVE in some way, the 'linux-kvm' package in cosmic is not affected (note: '4.18.0-1002.2'). OR The 'linux-oem' package in cosmic was vulnerable but has been fixed (note: '4.15.0-1026.31'). OR NOT While related to the CVE in some way, the 'linux-raspi2' package in cosmic is not affected (note: '4.18.0-1004.6').
BACK