It was discovered that the IPsec implementation in the Linux kernel did not properly allocate enough memory when performing ESP transformations, leading to a heap-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
{
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-gcp-4.15-headers-4.15.0-1120",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-gcp-4.15-tools-4.15.0-1120",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-headers-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-modules-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-modules-extra-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134"
},
{
"binary_name": "linux-tools-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-headers-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-modules-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-modules-extra-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-oracle-headers-4.15.0-1091",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-oracle-tools-4.15.0-1091",
"binary_version": "4.15.0-1091.100"
},
{
"binary_name": "linux-tools-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1107-raspi2",
"binary_version": "4.15.0-1107.114"
},
{
"binary_name": "linux-headers-4.15.0-1107-raspi2",
"binary_version": "4.15.0-1107.114"
},
{
"binary_name": "linux-image-4.15.0-1107-raspi2",
"binary_version": "4.15.0-1107.114"
},
{
"binary_name": "linux-modules-4.15.0-1107-raspi2",
"binary_version": "4.15.0-1107.114"
},
{
"binary_name": "linux-raspi2-headers-4.15.0-1107",
"binary_version": "4.15.0-1107.114"
},
{
"binary_name": "linux-raspi2-tools-4.15.0-1107",
"binary_version": "4.15.0-1107.114"
},
{
"binary_name": "linux-tools-4.15.0-1107-raspi2",
"binary_version": "4.15.0-1107.114"
}
],
"availability": "No subscription required"
}{
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-4.15.0-1136",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-azure-headers-4.15.0-1136",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-azure-tools-4.15.0-1136",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-buildinfo-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-headers-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-modules-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
},
{
"binary_name": "linux-tools-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~14.04.1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-aws-headers-4.15.0-1126",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-aws-hwe-cloud-tools-4.15.0-1126",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-aws-hwe-tools-4.15.0-1126",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-buildinfo-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-headers-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-modules-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-modules-extra-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
},
{
"binary_name": "linux-tools-4.15.0-1126-aws",
"binary_version": "4.15.0-1126.135~16.04.2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-4.15.0-1136",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-azure-headers-4.15.0-1136",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-azure-tools-4.15.0-1136",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-buildinfo-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-1136-azure",
"binary_version": "4.15.0-1136.149~16.04.1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-gcp-headers-4.15.0-1120",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-gcp-tools-4.15.0-1120",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-1120-gcp",
"binary_version": "4.15.0-1120.134~16.04.1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"
{
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-oracle-headers-4.15.0-1091",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-oracle-tools-4.15.0-1091",
"binary_version": "4.15.0-1091.100~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-1091-oracle",
"binary_version": "4.15.0-1091.100~16.04.1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2022-27666"
}
]
}
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5357-2.json"