Ubuntu: (Multiple Advisories) (CVE-2019-9445): Linux kernel vulnerabilities
2
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
09/06/2019
09/24/2020
09/22/2020
03/22/2023
Description
In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Solution(s)
- ubuntu-upgrade-linux-image-4-15-0-1054-oracle
- ubuntu-upgrade-linux-image-4-15-0-1070-gke
- ubuntu-upgrade-linux-image-4-15-0-1071-raspi2
- ubuntu-upgrade-linux-image-4-15-0-1075-kvm
- ubuntu-upgrade-linux-image-4-15-0-1083-aws
- ubuntu-upgrade-linux-image-4-15-0-1084-gcp
- ubuntu-upgrade-linux-image-4-15-0-1087-snapdragon
- ubuntu-upgrade-linux-image-4-15-0-1096-azure
- ubuntu-upgrade-linux-image-4-15-0-1097-oem
- ubuntu-upgrade-linux-image-4-15-0-118-generic
- ubuntu-upgrade-linux-image-4-15-0-118-generic-lpae
- ubuntu-upgrade-linux-image-4-15-0-118-lowlatency
- ubuntu-upgrade-linux-image-4-4-0-1078-aws
- ubuntu-upgrade-linux-image-4-4-0-1080-kvm
- ubuntu-upgrade-linux-image-4-4-0-1114-aws
- ubuntu-upgrade-linux-image-4-4-0-1139-raspi2
- ubuntu-upgrade-linux-image-4-4-0-1143-snapdragon
- ubuntu-upgrade-linux-image-4-4-0-190-generic
- ubuntu-upgrade-linux-image-4-4-0-190-generic-lpae
- ubuntu-upgrade-linux-image-4-4-0-190-lowlatency
- ubuntu-upgrade-linux-image-4-4-0-190-powerpc-e500mc
- ubuntu-upgrade-linux-image-4-4-0-190-powerpc-smp
- ubuntu-upgrade-linux-image-4-4-0-190-powerpc64-emb
- ubuntu-upgrade-linux-image-4-4-0-190-powerpc64-smp
- ubuntu-upgrade-linux-image-aws
- ubuntu-upgrade-linux-image-aws-hwe
- ubuntu-upgrade-linux-image-aws-lts-18-04
- ubuntu-upgrade-linux-image-azure
- ubuntu-upgrade-linux-image-azure-edge
- ubuntu-upgrade-linux-image-azure-lts-18-04
- ubuntu-upgrade-linux-image-gcp
- ubuntu-upgrade-linux-image-gcp-lts-18-04
- ubuntu-upgrade-linux-image-generic
- ubuntu-upgrade-linux-image-generic-hwe-16-04
- ubuntu-upgrade-linux-image-generic-lpae
- ubuntu-upgrade-linux-image-generic-lpae-hwe-16-04
- ubuntu-upgrade-linux-image-generic-lpae-lts-xenial
- ubuntu-upgrade-linux-image-generic-lts-xenial
- ubuntu-upgrade-linux-image-gke
- ubuntu-upgrade-linux-image-gke-4-15
- ubuntu-upgrade-linux-image-kvm
- ubuntu-upgrade-linux-image-lowlatency
- ubuntu-upgrade-linux-image-lowlatency-hwe-16-04
- ubuntu-upgrade-linux-image-lowlatency-lts-xenial
- ubuntu-upgrade-linux-image-oem
- ubuntu-upgrade-linux-image-oracle
- ubuntu-upgrade-linux-image-oracle-lts-18-04
- ubuntu-upgrade-linux-image-powerpc-e500mc
- ubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenial
- ubuntu-upgrade-linux-image-powerpc-smp
- ubuntu-upgrade-linux-image-powerpc-smp-lts-xenial
- ubuntu-upgrade-linux-image-powerpc64-emb
- ubuntu-upgrade-linux-image-powerpc64-emb-lts-xenial
- ubuntu-upgrade-linux-image-powerpc64-smp
- ubuntu-upgrade-linux-image-powerpc64-smp-lts-xenial
- ubuntu-upgrade-linux-image-raspi2
- ubuntu-upgrade-linux-image-snapdragon
- ubuntu-upgrade-linux-image-virtual
- ubuntu-upgrade-linux-image-virtual-hwe-16-04
- ubuntu-upgrade-linux-image-virtual-lts-xenial
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center