Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. (CVE-2023-20593)
Zheng Zhang discovered that the device-mapper implementation in the Linux kernel did not properly handle locking during table_clear() operations. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2023-2269)
It was discovered that a use-after-free vulnerability existed in the HFS+ file system implementation in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-2985)
It was discovered that the DVB Core driver in the Linux kernel did not properly handle locking events in certain situations. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2023-31084)
It was discovered that the Quick Fair Queueing network scheduler implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3611)
It was discovered that the network packet classifier with netfilter/firewall marks implementation in the Linux kernel did not properly handle reference counting, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-3776)
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-4.15.0-1169",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-azure-headers-4.15.0-1169",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-azure-tools-4.15.0-1169",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-buildinfo-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-headers-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-modules-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
},
{
"binary_name": "linux-tools-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~14.04.1"
}
]
}
{
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"cves": [
{
"id": "CVE-2023-2269",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-2985",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-3611",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-3776",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-20593",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-31084",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
]
}
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-4.15.0-1169",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-azure-headers-4.15.0-1169",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-azure-tools-4.15.0-1169",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-buildinfo-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184~16.04.1"
}
]
}
{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"id": "CVE-2023-2269",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-2985",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-3611",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-3776",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-20593",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-31084",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
]
}
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-4.15-cloud-tools-4.15.0-1169",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-azure-4.15-headers-4.15.0-1169",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-azure-4.15-tools-4.15.0-1169",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-buildinfo-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-headers-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-modules-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-modules-extra-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
},
{
"binary_name": "linux-tools-4.15.0-1169-azure",
"binary_version": "4.15.0-1169.184"
}
]
}
{
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"cves": [
{
"id": "CVE-2023-2269",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-2985",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-3611",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-3776",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-20593",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2023-31084",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
]
}