Language:
Severity: High
ID: 102421
File Name: ubuntu_USN-3385-2.nasl
Version: 3.15
Type: local
Agent: unix
Family: Ubuntu Local Security Checks
Published: 8/11/2017
Updated: 1/9/2024
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Factor: Critical
Score: 9.7
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2017-1000111
Risk Factor: High
Base Score: 7.8
Temporal Score: 7.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CPE: p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-powerpc-smp, p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-powerpc64-emb, p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-powerpc64-smp, cpe:/o:canonical:ubuntu_linux:14.04:-:lts, p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-lowlatency, p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-generic-lpae, p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-generic, p-cpe:/a:canonical:ubuntu_linux:linux-image-4.4.0-91-powerpc-e500mc
Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/10/2017
Vulnerability Publication Date: 10/5/2017
Core Impact
Metasploit (Linux Kernel UDP Fragmentation Offset (UFO) Privilege Escalation)
CVE: CVE-2017-1000111, CVE-2017-1000112
USN: 3385-2