Oval Definition:oval:com.ubuntu.xenial:def:2017155350000000
Revision Date:2017-10-31Version:1
Title:CVE-2017-15535 on Ubuntu 16.04 LTS (xenial) - untriaged.
Description:MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-15535
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • NOT mongodb package in xenial, while related to the CVE in some way, is not affected (note: 'code not present').
  • OR NOT mongodb-clients package in xenial, while related to the CVE in some way, is not affected (note: 'code not present').
  • OR NOT mongodb-server package in xenial, while related to the CVE in some way, is not affected (note: 'code not present').
  • BACK