CVE-2017-15121

Опубликовано: 07 дек. 2017

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 4.9

CVSS3: 5.5

Описание

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.

Релиз	Статус	Примечание
artful	not-affected	4.10.0-19.21
bionic	not-affected	4.13.0-16.19
devel	not-affected	4.15.0-20.21
esm-infra-legacy/trusty	not-affected	3.11.0-12.19
esm-infra/bionic	not-affected	4.13.0-16.19
esm-infra/xenial	not-affected	4.2.0-16.19
precise/esm	ignored	end of life, was needs-triage
trusty	not-affected	3.11.0-12.19
trusty/esm	not-affected	3.11.0-12.19
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	not-affected	4.15.0-1001.1
devel	not-affected	4.15.0-1007.7
esm-infra-legacy/trusty	not-affected	4.4.0-1002.2
esm-infra/bionic	not-affected	4.15.0-1001.1
esm-infra/xenial	not-affected	4.4.0-1001.10
precise/esm	DNE
trusty	not-affected	4.4.0-1002.2
trusty/esm	not-affected	4.4.0-1002.2
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	not-affected	4.15.0-1002.2
devel	not-affected	4.15.0-1009.9
esm-infra-legacy/trusty	not-affected	4.15.0-1023.24~14.04.1
esm-infra/bionic	not-affected	4.15.0-1002.2
esm-infra/xenial	not-affected	4.11.0-1009.9
precise/esm	DNE
trusty	not-affected	4.15.0-1023.24~14.04.1
trusty/esm	not-affected	4.15.0-1023.24~14.04.1
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	ignored	end of standard support, was needs-triage

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	3.11~rc1
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	not-affected	4.15.0-1001.1
devel	not-affected	4.15.0-1006.6
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	4.15.0-1001.1
esm-infra/xenial	not-affected	4.10.0-1004.4
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	not-affected	4.4.0-1003.3
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	3.11~rc1
xenial	ignored	end of standard support, was needed

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	not-affected
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	released	4.18.0-8.9~18.04.1
devel	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.18.0-8.9~18.04.1
esm-infra/xenial	not-affected	4.8.0-36.36~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	not-affected	4.15.0-1002.2
devel	not-affected	4.15.0-1008.8
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	4.15.0-1002.2
esm-infra/xenial	not-affected	4.4.0-1004.9
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	ignored	end of life
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	not-affected	3.13.0-24.46~precise1
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was ignored [end of life, was needs-triage]
precise/esm	DNE
trusty	ignored	end of standard support, was needs-triage
trusty/esm	ignored	end of life, was needs-triage
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [end of standard support]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [end of standard support]
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-13.29~14.04.1
precise/esm	DNE
trusty	not-affected	4.4.0-13.29~14.04.1
trusty/esm	not-affected	4.4.0-13.29~14.04.1
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	3.11~rc1
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	not-affected	4.15.0-1002.3
devel	not-affected	4.15.0-1004.5
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	4.15.0-1002.3
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	not-affected	4.13.0-1008.9

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Релиз	Статус	Примечание
artful	not-affected	4.10.0-1004.6
bionic	not-affected	4.13.0-1005.5
devel	not-affected	4.15.0-1010.11
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	not-affected	4.2.0-1013.19
zesty	not-affected	4.8.0-1013.15

Показывать по

Релиз	Статус	Примечание
artful	not-affected	4.4.0-1050.54
bionic	not-affected
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	not-affected	4.4.0-1012.12
zesty	not-affected	4.4.0-1029.32

Показывать по

Релиз	Статус	Примечание
artful	DNE
bionic	DNE
devel	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	3.11~rc1
xenial	DNE
zesty	DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 21%

0.00069

Низкий

4.9 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVE-2017-15121

CVSS3: 5.5

redhat

почти 8 лет назад

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.

CVE-2017-15121

CVSS3: 5.5

nvd

почти 8 лет назад

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.

CVE-2017-15121

CVSS3: 5.5

debian

почти 8 лет назад

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or ...

GHSA-j44m-j98w-c9cw

CVSS3: 5.5

github

больше 3 лет назад

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.

ELSA-2018-1854

oracle-oval

больше 7 лет назад

ELSA-2018-1854: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 21%

0.00069

Низкий

4.9 Medium

CVSS2

5.5 Medium

CVSS3

CVE-2017-15121

Описание

Пакет linux

Пакет linux-armadaxp

Пакет linux-aws

Пакет linux-azure

Пакет linux-euclid

Пакет linux-flo

Пакет linux-gcp

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-linaro-omap

Пакет linux-linaro-shared

Пакет linux-linaro-vexpress

Пакет linux-lts-quantal

Пакет linux-lts-raring

Пакет linux-lts-saucy

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-oem

Пакет linux-qcm-msm

Пакет linux-raspi2

Пакет linux-snapdragon

Пакет linux-ti-omap4

Ссылки на источники

Связанные уязвимости