Release 5: Akraino CVE Vulnerability Exception Request

Owned by Randy Stricklin
Last updated: Apr 14, 2022 by Daniil Egranov
3 min read

1.6.1+dfsg.3-2ubuntu1

Blueprints that have vulnerabilities with a CVSS score >= 9.0 and meet the following criteria should submit their information in the chart below to have the vulnerability considered for an exception:

  • Running at least the minimum OS version required by the Akraino Security Sub-Committee
    • Ubuntu
    • CentOS
    • Debian
    • Fedora
    • Suse Enterprise Server

Legend

Ubuntu Priority/Score Descriptions

Not VulnerablePackages which do not exist in the archive, are not affected by the vulnerability or have a fix applied in the archive.
PendingA fix has been applied and updated packages are awaiting arrival into the archive. For example, this might be used when wider testing is requested for the updated package.
UnknownOpen vulnerability where the priority is currently unknown and needs to be triaged.
NegligibleOpen vulnerability that may be a problem but otherwise does not impose a security risk due to various factors. Examples include when the vulnerability is only theoretical in nature, requires a very special situation, has almost no install base or does no real damage. These typically will not receive security updates unless there is an easy fix and some other issue causes an update.
LowOpen vulnerability that is a problem but does very little damage or is otherwise hard to exploit due to small user base or other factors such as requiring specific environment, uncommon configuration, user assistance, etc. These tend to be included in security updates only when higher priority issues require an update or if many low priority issues have built up.
MediumOpen vulnerability that is a real problem and is exploitable for many users of the affected software. Examples include network daemon denial of service, cross-site scripting and gaining user privileges.
HighOpen vulnerability that is a real problem and is exploitable for many users in the default configuration of the affected software. Examples include serious remote denial of service of the system, local root privilege escalations or local data theft.
CriticalOpen vulnerability that is a world-burning problem and is exploitable for most Ubuntu users. Examples include remote root privilege escalations or remote data theft.
CVE #BlueprintBlueprint OS/VerURL Showing OS Patch Not AvailableContact NameContact EmailCommentVendor CVSS ScoreVendor Patch AvailableException Status
CVE-2016-1585EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2016-1585

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Medium

NoApproved
CVE-2017-18342EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2017-18342

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2017-8283EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2017-8283

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Negligible

NoApproved
CVE-2018-20839EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2018-20839

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Medium

NoApproved
CVE-2019-17041EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2019-17041

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2019-17042EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2019-17042

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2019-19814EALT-EdgeUbuntu 18.04https://ubuntu.com/security/CVE-2019-19814

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2016-1585ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2016-1585

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Medium

NoApproved
CVE-2017-18342ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2017-18342

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2017-8283ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2017-8283

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Negligible

NoApproved
CVE-2018-20839ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2018-20839

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Medium

NoApproved
CVE-2019-17041ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2019-17041

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2019-17042ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2019-17042

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2019-19814ELIOT IOT GatewayUbuntu 18.04https://ubuntu.com/security/CVE-2019-19814

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2016-1585ELIOT SD-WAN/WAN Edge/uCPE Ubuntu 18.04https://ubuntu.com/security/CVE-2016-1585

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Medium

NoApproved
CVE-2017-18342ELIOT SD-WAN/WAN Edge/uCPEUbuntu 18.04https://ubuntu.com/security/CVE-2017-18342

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2017-8283ELIOT SD-WAN/WAN Edge/uCPEUbuntu 18.04https://ubuntu.com/security/CVE-2017-8283

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Negligible

NoApproved
CVE-2018-20839ELIOT SD-WAN/WAN Edge/uCPEUbuntu 18.04https://ubuntu.com/security/CVE-2018-20839

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Medium

NoApproved
CVE-2019-17041ELIOT SD-WAN/WAN Edge/uCPEUbuntu 18.04https://ubuntu.com/security/CVE-2019-17041

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2019-17042ELIOT SD-WAN/WAN Edge/uCPEUbuntu 18.04https://ubuntu.com/security/CVE-2019-17042

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2019-19814ELIOT SD-WAN/WAN Edge/uCPEUbuntu 18.04https://ubuntu.com/security/CVE-2019-19814

Srinivasan Selvam

srinivasanselvam2014@gmail.com

Low

NoApproved
CVE-2016-1585ICNUbuntu 18.04https://ubuntu.com/security/CVE-2016-1585

@Kuralamdhan Ramakrishnan

kuralamudhan.ramakrishnan@intel.com

Medium

No

Approved

CVE-2017-18342ICNUbuntu 18.04https://ubuntu.com/security/CVE-2017-18342@Kuralamdhan Ramakrishnankuralamudhan.ramakrishnan@intel.com

Low

NoApproved
CVE-2017-8283ICNUbuntu 18.04https://ubuntu.com/security/CVE-2017-8283@Kuralamdhan Ramakrishnankuralamudhan.ramakrishnan@intel.com

Negligible

18.04 Not vulnerable

1.18..24ubuntu1

Approved
CVE-2018-20839ICNUbuntu 18.04https://ubuntu.com/security/CVE-2018-20839

@Kuralamdhan Ramakrishnan

kuralamudhan.ramakrishnan@intel.com

Medium

NoApproved
CVE-2019-19814ICNUbuntu 18.04https://ubuntu.com/security/CVE-2019-19814

@Kuralamdhan Ramakrishnan

kuralamudhan.ramakrishnan@intel.com

Low

NoApproved
CVE-2019-17041ICNUbuntu 18.04https://ubuntu.com/security/CVE-2019-17041@Kuralamdhan Ramakrishnankuralamudhan.ramakrishnan@intel.com

Low

NoApproved
CVE-2019-17042ICNUbuntu 18.04https://ubuntu.com/security/CVE-2019-17042@Kuralamdhan Ramakrishnankuralamudhan.ramakrishnan@intel.com

Low

NoApproved
CVE-2016-1585Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2016-1585

Oleg Berzin

oberzin@equinix.com

Medium

NoApproved
CVE-2017-18342Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2017-18342

Oleg Berzin

oberzin@equinix.com

Low

NoApproved
CVE-2017-8283Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2017-8283

Oleg Berzin

oberzin@equinix.com

Negligible

NoApproved
CVE-2018-20839Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2018-20839

Oleg Berzin

oberzin@equinix.com

Medium

NoApproved
CVE-2019-17041Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2019-17041

Oleg Berzin

oberzin@equinix.com

Low

NoApproved
CVE-2019-17042Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2019-17042

Oleg Berzin

oberzin@equinix.com

Low

NoApproved
CVE-2019-19814Public Cloud Edge Interface (PCEI)Ubuntu 18.04https://ubuntu.com/security/CVE-2019-19814

Oleg Berzin

oberzin@equinix.com

Low

NoApproved
CVE-2016-1585ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2016-1585

Salvador Fuentes (Deactivated)


salvador.fuentes@intel.com

Medium

NoApproved
CVE-2017-18342ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2017-18342

Salvador Fuentes (Deactivated)

salvador.fuentes@intel.com

Low

NoApproved
CVE-2017-8283ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2017-8283

Salvador Fuentes (Deactivated)

salvador.fuentes@intel.com

Negligible

NoApproved
CVE-2018-20839ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2018-20839

Salvador Fuentes (Deactivated)

salvador.fuentes@intel.com

Medium

NoApproved
CVE-2019-17041ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2019-17041

Salvador Fuentes (Deactivated)

salvador.fuentes@intel.com

Low

NoApproved
CVE-2019-17042ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2019-17042

Salvador Fuentes (Deactivated)

salvador.fuentes@intel.com

Low

NoApproved
CVE-2019-19814ICN - Multi-Tenant Secure Cloud Native Platform Ubuntu 18.04https://ubuntu.com/security/CVE-2019-19814

Salvador Fuentes (Deactivated)

salvador.fuentes@intel.com

Low

NoApproved
CVE-2019-12900The AI Edge: Federated ML application at edgeCentOS 7.9https://access.redhat.com/security/cve/cve-2019-12900

rolandwu

wuzifan0817@gmail.com
LowNoApproved
CVE-2017-12652AI Edge: School/Education Video SecurityCentOS 7.9https://access.redhat.com/security/cve/cve-2017-12652Yu, Liyayulia@baidu.com
Low

Yes, however, patch has been installed (see below) however, vuls still reporting CVE.

Approved

CVE-2019-5482AI Edge: School/Education Video SecurityCentOS 7.9https://access.redhat.com/security/cve/cve-2019-5482Yu, Liyayulia@baidu.com
Medium

Yes, however, patch has been installed (see below) however, vuls still reporting CVE.

Approved