Oval Definition:	oval:com.ubuntu.xenial:def:20193874000
Revision Date: 2019-03-25 Version: 1 Title: CVE-2019-3874 on Ubuntu 16.04 LTS (xenial) - medium. Description: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-3874 Platform(s): Ubuntu 16.04 LTS Product(s): Definition Synopsis Ubuntu 16.04 LTS (xenial) is installed. AND Package Information The 'linux' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.4.0-147.173'). OR The 'linux-aws' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.4.0-1082.92'). OR The 'linux-aws-hwe' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-1038.40~16.04.1'). OR The 'linux-azure' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-1044.48'). OR The 'linux-azure-edge' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-1044.48'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needs-triage ESM criteria'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR The 'linux-gcp' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-1031.33~16.04.1'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'end-of-life'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'end-of-life'). OR The 'linux-hwe' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-49.52~16.04.1'). OR The 'linux-hwe-edge' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-49.52~16.04.1'). OR The 'linux-kvm' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.4.0-1045.51'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needs-triage now end-of-life'). OR The 'linux-oracle' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.15.0-1012.14~16.04.1'). OR The 'linux-raspi2' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.4.0-1108.116'). OR The 'linux-snapdragon' package in xenial is affected. An update containing the fix has been completed and is pending publication (note: '4.4.0-1112.117').
BACK