1.6.1+dfsg.3-2ubuntu1
Blueprints that have vulnerabilities with a CVSS score >= 9.0 and meet the following criteria should submit their information in the chart below to have the vulnerability considered for an exception:
- Running at least the minimum OS version required by the Akraino Security Sub-Committee
- Ubuntu
- CentOS
- Debian
- Fedora
- Suse Enterprise Server
Legend
Ubuntu Priority/Score Descriptions
...
...
Medium
...
...
Low
...
...
Negligible
...
...
Medium
...
...
Low
...
...
Low
...
...
Low
...
...
Medium
...
...
Low
...
...
Negligible
...
...
Medium
...
...
Low
...
...
Low
...
...
Low
...
...
Medium
...
...
Low
...
...
Negligible
...
...
Medium
...
...
Low
...
...
Low
...
...
Low
...
@Kuralamdhan Ramakrishnan
...
Medium
...
Approved
...
Low
...
Negligible
...
18.04 Not vulnerable
1.18..24ubuntu1
...
@Kuralamdhan Ramakrishnan
...
Medium
...
@Kuralamdhan Ramakrishnan
...
Low
...
Low
...
Low
...
...
Medium
...
...
Low
...
...
Negligible
...
...
Medium
...
...
Low
...
...
Low
...
...
Low
...
...
Medium
...
...
Low
...
...
Negligible
...
...
Medium
...
...
Low
...
...
Low
...
...
Low
...
...
Yes, however, patch has been installed (see below) however, vuls still reporting CVE.
...
Approved
...
Yes, however, patch has been installed (see below) however, vuls still reporting CVE.
...
Approved
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
CVE-2016-1585
...
...
CVE-2017-18201
...
...
CVE-2017-7827
...
...
...
CVE-2018-5090
...
...
Reported fixed in 58 and later version (installed), but still reported by Vuls
...
CVE-2018-5126
...
...
Reported fixed in 58 and later version (installed), but still reported by Vuls
...
CVE-2018-5145
...
1.6.1+dfsg.3-2ubuntu1
Blueprints that have vulnerabilities with a CVSS score >= 9.0 and meet the following criteria should submit their information in the chart below to have the vulnerability considered for an exception:
- Running at least the minimum OS version required by the Akraino Security Sub-Committee
- Ubuntu
- CentOS
- Debian
- Fedora
- Suse Enterprise Server
Legend
Ubuntu Priority/Score Descriptions
| Not Vulnerable | Packages which do not exist in the archive, are not affected by the vulnerability or have a fix applied in the archive. |
| Pending | A fix has been applied and updated packages are awaiting arrival into the archive. For example, this might be used when wider testing is requested for the updated package. |
| Unknown | Open vulnerability where the priority is currently unknown and needs to be triaged. |
| Negligible | Open vulnerability that may be a problem but otherwise does not impose a security risk due to various factors. Examples include when the vulnerability is only theoretical in nature, requires a very special situation, has almost no install base or does no real damage. These typically will not receive security updates unless there is an easy fix and some other issue causes an update. |
| Low | Open vulnerability that is a problem but does very little damage or is otherwise hard to exploit due to small user base or other factors such as requiring specific environment, uncommon configuration, user assistance, etc. These tend to be included in security updates only when higher priority issues require an update or if many low priority issues have built up. |
| Medium | Open vulnerability that is a real problem and is exploitable for many users of the affected software. Examples include network daemon denial of service, cross-site scripting and gaining user privileges. |
| High | Open vulnerability that is a real problem and is exploitable for many users in the default configuration of the affected software. Examples include serious remote denial of service of the system, local root privilege escalations or local data theft. |
| Critical | Open vulnerability that is a world-burning problem and is exploitable for most Ubuntu users. Examples include remote root privilege escalations or remote data theft. |
| CVE # | Blueprint | Blueprint OS/Ver | URL Showing OS Patch Not Available | Contact Name | Contact Email | Comment | Vendor CVSS Score | Vendor Patch Available | Exception Status | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CVE-2016-1585 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20182016- | 51451585 | inoue.reo@fujitsu.com | Medium | Reported fixed in 1:52.7.0 and later version (installed), but still reported by Vuls | CVE-2018-5151 | Robot basic architecture based on SSESsrinivasanselvam2014@gmail.com | Medium | No | Approved | |||||||
| CVE-2017-18342 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20182017- | 515118342 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | Low | Medium | Reported fixed in 60 and later version (installed), but still reported by VulsNo | Approved | ||||||||
| CVE-2019-17041Robot basic architecture based on SSES2017-8283 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20192017- | 170418283 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | LowNegligible | No | Approved | |||||||||
| CVE-20192018-17042Robot basic architecture based on SSES20839 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20192018- | 1704220839 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | LowMedium | No | Approved | ||||||||||
| CVE- | 20212019- | 31870Robot basic architecture based on SSES17041 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20212019- | 3187017041 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | Low | No | Approved | |||||||
| CVE-20212019-31872Robot basic architecture based on SSES17042 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20212019- | 3187217042 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | Low | No | Approved | ||||||||||
| CVE- | 20212019- | 31873Robot basic architecture based on SSES19814 | EALT-Edge | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20212019- | 3187319814 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | Low | No | Approved | |||||||
| CVE- | 20212016- | 39713Robot basic architecture based on SSES1585 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20212016- | 397131585 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | LowMedium | No | Approved | |||||||
| CVE- | 20222017- | 22822Robot basic architecture based on SSES18342 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222017- | 2282218342 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | MediumLow | No | Approved | ||||||||
| CVE- | 20222017- | 22823Robot basic architecture based on SSES8283 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222017- | 228238283 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | MediumNegligible | No | Approved | ||||||||
| CVE- | 20222018- | 22824Robot basic architecture based on SSES20839 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222018- | 2282420839 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | Medium | No | Approved | ||||||||
| CVE- | 20222019- | 23852Robot basic architecture based on SSES17041 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222019- | 2385217041 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | MediumLow | No | Approved | |||||||
| CVE- | 20222019- | 23990Robot basic architecture based on SSES17042 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222019- | 2399017042 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | MediumLow | No | Approved | |||||||
| CVE- | 20222019- | 25235Robot basic architecture based on SSES19814 | ELIOT IOT Gateway | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222019- | 2523519814 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | HighLow | No | Approved | ||||||||
| CVE- | 20222016- | 25236Robot basic architecture based on SSES1585 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222016- | 252361585 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | HighMedium | No | Approved | ||||||||
| CVE- | 20222017- | 25315Robot basic architecture based on SSES18342 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20222017- | 2531518342 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | MediumLow | No | Approved | |||||||
| CVE- | 20162017- | 9180Robot basic architecture based on SSES8283 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20162017- | 91808283 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | LowNegligible | No | Approved | |||||||
| CVE- | 20192018- | 20433Robot basic architecture based on SSES20839 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https://ubuntu.com/security/CVE- | 20192018- | 2043320839 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | LowMedium | No | Approved | |||||||
| CVE-20052019-2541 | Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)17041 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https://security-tracker.debian.org/trackerubuntu.com/security/CVE-20052019-254117041 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | High Low | No | Approved | ||||||||||
| CVE- | 20142019- | 2830Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)17042 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20142019- | 283017042 | inoueinoue | srinivasanselvam2014@gmail. | reo@fujitsu.com | HighLow | No | Approved | |||||
| CVE- | 20162019- | 1585Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)19814 | ELIOT SD-WAN/WAN Edge/uCPE | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20162019- | 158519814 | inoue.reo@fujitsu | srinivasanselvam2014@gmail.com | HighLow | No | Approved | ||||||
| CVE- | 20172016- | 17479Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)1585 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20172016- | 174791585 | inoue@Kuralamdhan Ramakrishnan | inouekuralamudhan. | reo@fujitsuramakrishnan@intel.com | HighMedium | No | Approved | |||||
| CVE-2017- | 9117Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)18342 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE-2017- | 911718342 | inoue@Kuralamdhan Ramakrishnan | inouekuralamudhan. | reo@fujitsuramakrishnan@intel.com | HighLow | No | Approved | |||||||
| CVE- | 20182017- | 13410Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)8283 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE | -2018-13410inoue.reo@fujitsu.com | High | No | CVE-2019-1010022 | Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)-2017-8283 | @Kuralamdhan Ramakrishnan | kuralamudhan.ramakrishnan@intel.com | Negligible | 18.04 Not vulnerable 1.18..24ubuntu1
| Approved | ||
| CVE-2018-20839 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20192018- | 101002220839 | inoue@Kuralamdhan Ramakrishnan | inouekuralamudhan. | reo@fujitsuramakrishnan@intel.com | HighMedium | No | Approved | ||||||||
| CVE-2019- | 8341Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)19814 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE-2019- | 834119814 | inoue@Kuralamdhan Ramakrishnan | inouekuralamudhan. | reo@fujitsuramakrishnan@intel.com | HighLow | No | Approved | |||||||
| CVE- | 20202019- | 27619Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)17041 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20202019- | 2761917041 | inoue@Kuralamdhan Ramakrishnan | inouekuralamudhan. | reo@fujitsuramakrishnan@intel.com | Low | HighNo | Approved | |||||
| CVE- | 20212019- | 29462Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)17042 | ICN | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 2021-29462inoue.reo@fujitsu | 2019-17042 | @Kuralamdhan Ramakrishnan | kuralamudhan.ramakrishnan@intel.com | HighLow | No | Approved | ||||||
| CVE- | 20212016- | 29921Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11) | 1585 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212016- | 299211585 | inoueinoue | oberzin@equinix. | reo@fujitsu.com | High | Reported fixed in python3.9 (installed), but still reported by VulsMedium | No | Approved | |||
| CVE- | 20212017- | 30473Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11) | 18342 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212017- | 3047318342 | inoueinoue | oberzin@equinix. | reo@fujitsu.com | HighLow | No | Approved | ||||
| CVE- | 2021-30474Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11) | 2017-8283 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212017- | 304748283 | inoueinoue | oberzin@equinix. | reo@fujitsu.com | HighNegligible | No | Approved | |||||
| CVE- | 20212018- | 30475Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)20839 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212018- | 3047520839 | inoueinoue | oberzin@equinix. | reo@fujitsu.com | HighMedium | No | Approved | |||||
| CVE- | 20212019- | 30498Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)17041 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212019- | 3049817041 | inoueinoue | oberzin@equinix. | reo@fujitsu.com | HighLow | No | Approved | |||||
| CVE- | 20212019- | 30499Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11) | 17042 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212019- | 3049917042 | inoueinoue | oberzin@equinix. | reo@fujitsu.com | HighLow | No | CVE-2021-42377 | Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11) | Approved | |
| CVE-2019-19814 | Public Cloud Edge Interface (PCEI) | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212019- | 4237719814 | inoue.reo@fujitsu | oberzin@equinix.com | MediumLow | No | Approved | |||||||||
| CVE- | 20212016- | 45951Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)1585 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212016- | 45951inoue.reo@fujitsu | 1585 | salvador.fuentes@intel.com | HighMedium | No | Approved | ||||||
| CVE- | 20212017- | 45952Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)18342 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212017- | 45952inoue.reo@fujitsu | 18342 | salvador.fuentes@intel.com | HighLow | No | Approved | ||||||
| CVE-20212017-45953 | Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)8283 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212017- | 45953inoue.reo@fujitsu | 8283 | salvador.fuentes@intel.com | HighNegligible | No | Approved | |||||||
| CVE- | 20212018- | 45954Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)20839 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212018- | 45954inoue.reo@fujitsu | 20839 | salvador.fuentes@intel.com | HighMedium | No | Approved | ||||||
| CVE- | 20212019- | 45955Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)17041 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212019- | 45955inoue.reo@fujitsu | 17041 | salvador.fuentes@intel.com | HighLow | No | Approved | ||||||
| CVE | -2021-45956Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11) | -2019-17042 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20212019- | 45956inoue.reo@fujitsu | 17042 | salvador.fuentes@intel.com | HighLow | No | Approved | ||||||
| CVE- | 20222019- | 23303Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)19814 | ICN - Multi-Tenant Secure Cloud Native Platform | Ubuntu 18.04 | https:// | security-tracker.debian.org/trackerubuntu.com/security/CVE- | 20222019- | 23303inoue.reo@fujitsu | 19814 | salvador.fuentes@intel.com | MediumLow | No | Approved | ||||||
| CVE- | 20222019- | 23304Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)12900 | The AI Edge: Federated ML application at edge | CentOS 7.9 | https:// | security-trackeraccess. | debianredhat. | orgcom/security/ | trackercve/ | CVEcve- | 20222019- | 2330412900 | inoueinoue.reo@fujitsu | wuzifan0817@gmail.com | MediumLow | No | Approved | ||
| CVE- | 20212017- | 4048Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)12652 | AI Edge: School/Education Video Security | CentOS 7.9 | https:// | security-tracker.debian.org/tracker/CVE-2021-4048inoue.reo@fujitsu.com | Medium | No | CVE-2021-43400 | Robot basic architecture based on SSES | Raspberry Pi OS(Debian 11)access.redhat.com/security/cve/cve-2017-12652 | Yu, Liya | yulia@baidu.com | Low | Yes, however, patch has been installed (see below) however, vuls still reporting CVE.  | Approved | |||
| CVE-2019-5482 | AI Edge: School/Education Video Security | CentOS 7.9 | https:// | security-trackeraccess. | debianredhat. | orgcom/security/ | trackercve/ | CVEcve- | 20212019- | 434005482 | inoue.reo@fujitsu | Yu, Liya | yulia@baidu.com | Medium | No |
...
Yes, however, patch has been installed (see below) however, vuls still reporting CVE.
| Approved |