Oval Definition:	oval:com.ubuntu.xenial:def:201621170000000
Revision Date: 2016-05-02 Version: 1 Title: CVE-2016-2117 on Ubuntu 16.04 LTS (xenial) - high. Description: The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data. Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. Family: unix Class: vulnerability Status: Reference(s): CVE-2016-2117 Platform(s): Ubuntu 16.04 LTS Product(s): Definition Synopsis Ubuntu 16.04 LTS (xenial) is installed. AND Package Information linux package in xenial was vulnerable but has been fixed (note: '4.4.0-24.43'). OR linux-aws package in xenial, is related to the CVE in some way and has been fixed (note: '4.4.0-1001.10'). OR linux-gke package in xenial, is related to the CVE in some way and has been fixed (note: '4.4.0-1003.3'). OR linux-hwe package in xenial, is related to the CVE in some way and has been fixed (note: '4.8.0-36.36~16.04.1'). OR linux-meta package in xenial was vulnerable but has been fixed (note: '4.4.0-24.43'). OR linux-meta-aws package in xenial, is related to the CVE in some way and has been fixed (note: '4.4.0-1001.10'). OR linux-meta-hwe package in xenial, is related to the CVE in some way and has been fixed (note: '4.8.0-36.36~16.04.1'). OR linux-meta-raspi2 package in xenial was vulnerable but has been fixed (note: '4.4.0-1012.16'). OR linux-meta-snapdragon package in xenial was vulnerable but has been fixed (note: '4.4.0-1015.18'). OR linux-raspi2 package in xenial was vulnerable but has been fixed (note: '4.4.0-1012.16'). OR linux-signed package in xenial was vulnerable but has been fixed (note: '4.4.0-24.43'). OR linux-signed-hwe package in xenial, is related to the CVE in some way and has been fixed (note: '4.8.0-36.36~16.04.1'). OR linux-snapdragon package in xenial was vulnerable but has been fixed (note: '4.4.0-1015.18').
BACK