Oval Definition:	oval:com.ubuntu.cosmic:def:20189517000
Revision Date: 2018-12-07 Version: 1 Title: CVE-2018-9517 on Ubuntu 18.10 (cosmic) - medium. Description: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931. It was discovered that a use-after-free vulnerability existed in the PPP over L2TP implementation in the Linux kernel. A privileged local attacker could use this to possibly execute arbitrary code. Family: unix Class: vulnerability Status: Reference(s): CVE-2018-9517 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in cosmic is not affected (note: '4.15.0-20.21'). OR NOT While related to the CVE in some way, the 'linux-aws' package in cosmic is not affected (note: '4.15.0-1007.7'). OR NOT While related to the CVE in some way, the 'linux-azure' package in cosmic is not affected (note: '4.15.0-1009.9'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in cosmic is not affected (note: '4.15.0-1006.6'). OR NOT While related to the CVE in some way, the 'linux-kvm' package in cosmic is not affected (note: '4.15.0-1008.8'). OR NOT While related to the CVE in some way, the 'linux-oem' package in cosmic is not affected (note: '4.15.0-1004.5'). OR NOT While related to the CVE in some way, the 'linux-oracle' package in cosmic is not affected (note: '4.15.0-1007.9'). OR NOT While related to the CVE in some way, the 'linux-raspi2' package in cosmic is not affected (note: '4.15.0-1010.11').
BACK