Oval Definition:	oval:com.ubuntu.cosmic:def:20193887000
Revision Date: 2019-04-09 Version: 1 Title: CVE-2019-3887 on Ubuntu 18.10 (cosmic) - medium. Description: A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-3887 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information The 'linux' package in cosmic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-19.20'). OR The 'linux-aws' package in cosmic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1015.17'). OR The 'linux-azure' package in cosmic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1017.17'). OR The 'linux-gcp' package in cosmic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1010.11'). OR The 'linux-kvm' package in cosmic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1011.11'). OR NOT While related to the CVE in some way, the 'linux-oem' package in cosmic is not affected (note: '4.15.0-1004.5'). OR NOT While related to the CVE in some way, the 'linux-oracle' package in cosmic is not affected (note: '4.15.0-1007.9'). OR The 'linux-raspi2' package in cosmic is affected. An update containing the fix has been completed and is pending publication (note: '4.18.0-1013.15').
BACK