Files
vuln-ubuntu/data/osv/usn/USN-5591-4.json
T

203 lines
5.5 KiB
JSON

{
"schema_version": "1.7.0",
"id": "USN-5591-4",
"summary": "linux-aws vulnerability",
"details": "\nIt was discovered that the virtual terminal driver in the Linux kernel did\nnot properly handle VGA console font changes, leading to an out-of-bounds\nwrite. A local attacker could use this to cause a denial of service (system\ncrash) or possibly execute arbitrary code.\n",
"aliases": [],
"upstream": [
"UBUNTU-CVE-2021-33656"
],
"related": [],
"published": "2022-09-02T22:27:51Z",
"modified": "2026-09-14T08:02:08Z",
"affected": [
{
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@4.15.0-1140.151?arch=source&distro=bionic"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.15.0-1140.151"
}
]
}
],
"versions": [
"4.15.0-1001.1",
"4.15.0-1003.3",
"4.15.0-1005.5",
"4.15.0-1006.6",
"4.15.0-1007.7",
"4.15.0-1009.9",
"4.15.0-1010.10",
"4.15.0-1011.11",
"4.15.0-1016.16",
"4.15.0-1017.17",
"4.15.0-1019.19",
"4.15.0-1020.20",
"4.15.0-1021.21",
"4.15.0-1023.23",
"4.15.0-1025.25",
"4.15.0-1027.27",
"4.15.0-1029.30",
"4.15.0-1031.33",
"4.15.0-1032.34",
"4.15.0-1033.35",
"4.15.0-1034.36",
"4.15.0-1035.37",
"4.15.0-1037.39",
"4.15.0-1039.41",
"4.15.0-1040.42",
"4.15.0-1041.43",
"4.15.0-1043.45",
"4.15.0-1044.46",
"4.15.0-1045.47",
"4.15.0-1047.49",
"4.15.0-1048.50",
"4.15.0-1050.52",
"4.15.0-1051.53",
"4.15.0-1052.54",
"4.15.0-1054.56",
"4.15.0-1056.58",
"4.15.0-1057.59",
"4.15.0-1058.60",
"4.15.0-1060.62",
"4.15.0-1063.67",
"4.15.0-1065.69",
"4.15.0-1066.70",
"4.15.0-1067.71",
"4.15.0-1073.77",
"4.15.0-1076.80",
"4.15.0-1077.81",
"4.15.0-1079.83",
"4.15.0-1080.84",
"4.15.0-1082.86",
"4.15.0-1083.87",
"4.15.0-1086.91",
"4.15.0-1087.92",
"4.15.0-1088.93",
"4.15.0-1090.95",
"4.15.0-1091.96",
"4.15.0-1092.98",
"4.15.0-1093.99",
"4.15.0-1094.101",
"4.15.0-1095.102",
"4.15.0-1096.103",
"4.15.0-1097.104",
"4.15.0-1098.105",
"4.15.0-1099.106",
"4.15.0-1101.108",
"4.15.0-1102.109",
"4.15.0-1103.110",
"4.15.0-1106.113",
"4.15.0-1109.116",
"4.15.0-1110.117",
"4.15.0-1111.118",
"4.15.0-1112.119",
"4.15.0-1114.121",
"4.15.0-1115.122",
"4.15.0-1116.123",
"4.15.0-1118.125",
"4.15.0-1119.127",
"4.15.0-1121.129",
"4.15.0-1123.132",
"4.15.0-1124.133",
"4.15.0-1126.135",
"4.15.0-1127.136",
"4.15.0-1128.137",
"4.15.0-1130.139",
"4.15.0-1133.143",
"4.15.0-1136.147",
"4.15.0-1137.148",
"4.15.0-1139.150"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-4.15.0-1140",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-aws-headers-4.15.0-1140",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-aws-tools-4.15.0-1140",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-buildinfo-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-cloud-tools-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-headers-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-modules-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-modules-extra-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
},
{
"binary_name": "linux-tools-4.15.0-1140-aws",
"binary_version": "4.15.0-1140.151"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"id": "CVE-2021-33656",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-5591-4"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2021-33656"
}
]
}