{"id":"USN-4186-1","summary":"linux, linux-aws, linux-kvm vulnerabilities","details":"Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo,\nKaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz\nLipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel\nprocessors using Transactional Synchronization Extensions (TSX) could\nexpose memory contents previously stored in microarchitectural buffers to a\nmalicious process that is executing on the same CPU core. A local attacker\ncould use this to expose sensitive information. (CVE-2019-11135)\n\nIt was discovered that the Intel i915 graphics chipsets allowed userspace\nto modify page table entries via writes to MMIO from the Blitter Command\nStreamer and expose kernel memory information. A local attacker could use\nthis to expose sensitive information or possibly elevate privileges.\n(CVE-2019-0155)\n\nDeepak Gupta discovered that on certain Intel processors, the Linux kernel\ndid not properly perform invalidation on page table updates by virtual\nguest operating systems. A local attacker in a guest VM could use this to\ncause a denial of service (host system crash). (CVE-2018-12207)\n\nIt was discovered that the Intel i915 graphics chipsets could cause a\nsystem hang when userspace performed a read from GT memory mapped input\noutput (MMIO) when the product is in certain low power states. A local\nattacker could use this to cause a denial of service. (CVE-2019-0154)\n\nHui Peng discovered that the Atheros AR6004 USB Wi-Fi device driver for the\nLinux kernel did not properly validate endpoint descriptors returned by the\ndevice. A physically proximate attacker could use this to cause a denial of\nservice (system crash). (CVE-2019-15098)\n\nIt was discovered that a buffer overflow existed in the 802.11 Wi-Fi\nconfiguration interface for the Linux kernel when handling beacon settings.\nA local attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2019-16746)\n\nOri Nimron discovered that the AX25 network protocol implementation in the\nLinux kernel did not properly perform permissions checks. A local attacker\ncould use this to create a raw socket. (CVE-2019-17052)\n\nOri Nimron discovered that the IEEE 802.15.4 Low-Rate Wireless network\nprotocol implementation in the Linux kernel did not properly perform\npermissions checks. A local attacker could use this to create a raw socket.\n(CVE-2019-17053)\n\nOri Nimron discovered that the Appletalk network protocol implementation in\nthe Linux kernel did not properly perform permissions checks. A local\nattacker could use this to create a raw socket. (CVE-2019-17054)\n\nOri Nimron discovered that the modular ISDN network protocol implementation\nin the Linux kernel did not properly perform permissions checks. A local\nattacker could use this to create a raw socket. (CVE-2019-17055)\n\nOri Nimron discovered that the Near field Communication (NFC) network\nprotocol implementation in the Linux kernel did not properly perform\npermissions checks. A local attacker could use this to create a raw socket.\n(CVE-2019-17056)\n\nNico Waisman discovered that a buffer overflow existed in the Realtek Wi-Fi\ndriver for the Linux kernel when handling Notice of Absence frames. A\nphysically proximate attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2019-17666)\n\nMaddie Stone discovered that the Binder IPC Driver implementation in the\nLinux kernel contained a use-after-free vulnerability. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2019-2215)\n","modified":"2026-04-27T15:48:44.281703289Z","published":"2019-11-13T01:06:52Z","related":["UBUNTU-CVE-2018-12207","UBUNTU-CVE-2019-0154","UBUNTU-CVE-2019-0155","UBUNTU-CVE-2019-11135","UBUNTU-CVE-2019-15098","UBUNTU-CVE-2019-16746","UBUNTU-CVE-2019-17052","UBUNTU-CVE-2019-17053","UBUNTU-CVE-2019-17054","UBUNTU-CVE-2019-17055","UBUNTU-CVE-2019-17056","UBUNTU-CVE-2019-17666","UBUNTU-CVE-2019-2215"],"upstream":["CVE-2018-12207","CVE-2019-0154","CVE-2019-0155","CVE-2019-11135","CVE-2019-15098","CVE-2019-16746","CVE-2019-17052","CVE-2019-17053","CVE-2019-17054","CVE-2019-17055","CVE-2019-17056","CVE-2019-17666","CVE-2019-2215","UBUNTU-CVE-2018-12207","UBUNTU-CVE-2019-0154","UBUNTU-CVE-2019-0155","UBUNTU-CVE-2019-11135","UBUNTU-CVE-2019-15098","UBUNTU-CVE-2019-16746","UBUNTU-CVE-2019-17052","UBUNTU-CVE-2019-17053","UBUNTU-CVE-2019-17054","UBUNTU-CVE-2019-17055","UBUNTU-CVE-2019-17056","UBUNTU-CVE-2019-17666","UBUNTU-CVE-2019-2215"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-4186-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-12207"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-0154"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-0155"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-2215"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-11135"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-15098"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-16746"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-17052"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-17053"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-17054"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-17055"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-17056"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-17666"}],"affected":[{"package":{"name":"linux","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/linux@4.4.0-168.197?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-168.197"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135","4.4.0-116.140","4.4.0-119.143","4.4.0-121.145","4.4.0-122.146","4.4.0-124.148","4.4.0-127.153","4.4.0-128.154","4.4.0-130.156","4.4.0-131.157","4.4.0-133.159","4.4.0-134.160","4.4.0-135.161","4.4.0-137.163","4.4.0-138.164","4.4.0-139.165","4.4.0-140.166","4.4.0-141.167","4.4.0-142.168","4.4.0-143.169","4.4.0-145.171","4.4.0-146.172","4.4.0-148.174","4.4.0-150.176","4.4.0-151.178","4.4.0-154.181","4.4.0-157.185","4.4.0-159.187","4.4.0-161.189","4.4.0-164.192","4.4.0-165.193","4.4.0-166.195"],"ecosystem_specific":{"binaries":[{"binary_version":"4.4.0-168.197","binary_name":"block-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"block-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"block-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"block-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"block-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"crypto-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"crypto-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"crypto-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"crypto-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"crypto-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"dasd-extra-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"dasd-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"fat-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"fat-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"fat-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"fat-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"fat-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"fb-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"firewire-core-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"firewire-core-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"firewire-core-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"firewire-core-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"floppy-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"floppy-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"floppy-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"floppy-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-core-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-core-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-core-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-core-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-core-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-secondary-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-secondary-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-secondary-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-secondary-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"fs-secondary-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"input-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"input-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"input-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"input-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"input-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"ipmi-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"ipmi-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"ipmi-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"ipmi-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"ipmi-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"irda-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"irda-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"irda-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"irda-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"irda-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"kernel-image-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"kernel-image-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"kernel-image-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"kernel-image-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"kernel-image-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-generic-lpae"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-powerpc-e500mc"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-powerpc-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-powerpc64-emb"},{"binary_version":"4.4.0-168.197","binary_name":"linux-buildinfo-4.4.0-168-powerpc64-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-cloud-tools-4.4.0-168"},{"binary_version":"4.4.0-168.197","binary_name":"linux-cloud-tools-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-cloud-tools-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-cloud-tools-common"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-generic-lpae"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-powerpc-e500mc"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-powerpc-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-powerpc64-emb"},{"binary_version":"4.4.0-168.197","binary_name":"linux-headers-4.4.0-168-powerpc64-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-generic-lpae"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-powerpc-e500mc"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-powerpc-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-powerpc64-emb"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-4.4.0-168-powerpc64-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-unsigned-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-image-unsigned-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-generic-lpae"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-powerpc-e500mc"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-powerpc-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-powerpc64-emb"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-4.4.0-168-powerpc64-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-modules-extra-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-source-4.4.0"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-generic-lpae"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-lowlatency"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-powerpc-e500mc"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-powerpc-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-powerpc64-emb"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-4.4.0-168-powerpc64-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-common"},{"binary_version":"4.4.0-168.197","binary_name":"linux-tools-host"},{"binary_version":"4.4.0-168.197","binary_name":"linux-udebs-generic"},{"binary_version":"4.4.0-168.197","binary_name":"linux-udebs-generic-lpae"},{"binary_version":"4.4.0-168.197","binary_name":"linux-udebs-powerpc-e500mc"},{"binary_version":"4.4.0-168.197","binary_name":"linux-udebs-powerpc-smp"},{"binary_version":"4.4.0-168.197","binary_name":"linux-udebs-powerpc64-smp"},{"binary_version":"4.4.0-168.197","binary_name":"md-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"md-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"md-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"md-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"md-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"message-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"message-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"message-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"message-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"mouse-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"mouse-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"mouse-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"mouse-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"mouse-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"multipath-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"multipath-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"multipath-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"multipath-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"multipath-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nfs-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"nfs-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"nfs-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"nfs-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nfs-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-pcmcia-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-shared-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-shared-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-shared-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-shared-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-shared-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-usb-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-usb-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-usb-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-usb-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"nic-usb-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"parport-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"parport-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"parport-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"parport-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"parport-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"pata-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"pata-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"pata-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"pata-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"pcmcia-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"pcmcia-storage-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"plip-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"plip-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"plip-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"plip-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"plip-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"ppp-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"ppp-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"ppp-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"ppp-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"ppp-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"sata-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"sata-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"sata-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"sata-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"sata-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"scsi-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"scsi-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"scsi-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"scsi-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"scsi-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"serial-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"speakup-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"speakup-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"speakup-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"speakup-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"speakup-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"storage-core-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"storage-core-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"storage-core-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"storage-core-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"storage-core-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"usb-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"usb-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"usb-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"usb-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"usb-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"virtio-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"virtio-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"virtio-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"virtio-modules-4.4.0-168-powerpc64-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"vlan-modules-4.4.0-168-generic-di"},{"binary_version":"4.4.0-168.197","binary_name":"vlan-modules-4.4.0-168-generic-lpae-di"},{"binary_version":"4.4.0-168.197","binary_name":"vlan-modules-4.4.0-168-powerpc-e500mc-di"},{"binary_version":"4.4.0-168.197","binary_name":"vlan-modules-4.4.0-168-powerpc-smp-di"},{"binary_version":"4.4.0-168.197","binary_name":"vlan-modules-4.4.0-168-powerpc64-smp-di"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:16.04:LTS","cves":[{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2018-12207"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-0154"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2019-2215"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2019-11135"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-15098"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-16746"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17052"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17053"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17054"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17055"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17056"},{"severity":[{"score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17666"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4186-1.json"}},{"package":{"name":"linux-aws","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/linux-aws@4.4.0-1098.109?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1098.109"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59","4.4.0-1052.61","4.4.0-1054.63","4.4.0-1055.64","4.4.0-1057.66","4.4.0-1060.69","4.4.0-1061.70","4.4.0-1062.71","4.4.0-1063.72","4.4.0-1065.75","4.4.0-1066.76","4.4.0-1067.77","4.4.0-1069.79","4.4.0-1070.80","4.4.0-1072.82","4.4.0-1073.83","4.4.0-1074.84","4.4.0-1075.85","4.4.0-1077.87","4.4.0-1079.89","4.4.0-1081.91","4.4.0-1083.93","4.4.0-1084.94","4.4.0-1085.96","4.4.0-1087.98","4.4.0-1088.99","4.4.0-1090.101","4.4.0-1092.103","4.4.0-1094.105","4.4.0-1095.106","4.4.0-1096.107"],"ecosystem_specific":{"binaries":[{"binary_version":"4.4.0-1098.109","binary_name":"linux-aws-cloud-tools-4.4.0-1098"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-aws-headers-4.4.0-1098"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-aws-tools-4.4.0-1098"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-buildinfo-4.4.0-1098-aws"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-cloud-tools-4.4.0-1098-aws"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-headers-4.4.0-1098-aws"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-image-4.4.0-1098-aws"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-modules-4.4.0-1098-aws"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-modules-extra-4.4.0-1098-aws"},{"binary_version":"4.4.0-1098.109","binary_name":"linux-tools-4.4.0-1098-aws"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:16.04:LTS","cves":[{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2018-12207"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-0154"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2019-2215"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2019-11135"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-15098"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-16746"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17052"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17053"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17054"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17055"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17056"},{"severity":[{"score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17666"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4186-1.json"}},{"package":{"name":"linux-kvm","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/linux-kvm@4.4.0-1062.69?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1062.69"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22","4.4.0-1019.24","4.4.0-1020.25","4.4.0-1021.26","4.4.0-1023.28","4.4.0-1026.31","4.4.0-1027.32","4.4.0-1029.34","4.4.0-1031.37","4.4.0-1032.38","4.4.0-1033.39","4.4.0-1035.41","4.4.0-1036.42","4.4.0-1037.43","4.4.0-1038.44","4.4.0-1039.45","4.4.0-1040.46","4.4.0-1041.47","4.4.0-1043.49","4.4.0-1044.50","4.4.0-1046.52","4.4.0-1047.53","4.4.0-1048.55","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1056.63","4.4.0-1058.65","4.4.0-1059.66","4.4.0-1060.67"],"ecosystem_specific":{"binaries":[{"binary_version":"4.4.0-1062.69","binary_name":"linux-buildinfo-4.4.0-1062-kvm"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-cloud-tools-4.4.0-1062-kvm"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-headers-4.4.0-1062-kvm"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-image-4.4.0-1062-kvm"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-kvm-cloud-tools-4.4.0-1062"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-kvm-headers-4.4.0-1062"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-kvm-tools-4.4.0-1062"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-modules-4.4.0-1062-kvm"},{"binary_version":"4.4.0-1062.69","binary_name":"linux-tools-4.4.0-1062-kvm"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:16.04:LTS","cves":[{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2018-12207"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-0154"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2019-2215"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2019-11135"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-15098"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-16746"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17052"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17053"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17054"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17055"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17056"},{"severity":[{"score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2019-17666"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4186-1.json"}}],"schema_version":"1.7.5"}