Oval Definition:	oval:com.ubuntu.xenial:def:20183574000
Revision Date: 2018-09-19 Version: 1 Title: CVE-2018-3574 on Ubuntu 16.04 LTS (xenial) - low. Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the ION_FLAG_SECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which does not belong to HLOS. Family: unix Class: vulnerability Status: Reference(s): CVE-2018-3574 Platform(s): Ubuntu 16.04 LTS Product(s): Definition Synopsis Ubuntu 16.04 LTS (xenial) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-aws' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-azure' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-azure-edge' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-euclid' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'end-of-life'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'end-of-life'). OR NOT While related to the CVE in some way, the 'linux-hwe' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-hwe-edge' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-kvm' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-oem' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-raspi2' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-snapdragon' package in xenial is not affected.
BACK