Oval Definition:	oval:com.ubuntu.xenial:def:20149789000
Revision Date: 2016-07-10 Version: 1 Title: CVE-2014-9789 on Ubuntu 16.04 LTS (xenial) - medium. Description: The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm internal bug CR556425. Family: unix Class: vulnerability Status: Reference(s): CVE-2014-9789 Platform(s): Ubuntu 16.04 LTS Product(s): Definition Synopsis Ubuntu 16.04 LTS (xenial) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in xenial is not affected (note: 'android kernel only'). OR NOT While related to the CVE in some way, the 'linux-aws' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-gke' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-hwe' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-hwe-edge' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-raspi2' package in xenial is not affected (note: 'android kernel only'). OR NOT While related to the CVE in some way, the 'linux-snapdragon' package in xenial is not affected (note: 'android kernel only').
BACK