CCE-90483-9Platform: cpe:/o:ubuntu:ubuntu_linux:14.10 | Date: (C)2023-07-04 (M)2023-07-04 |
All USB support can be disabled by adding the
<xhtml:code>nousb</xhtml:code>
argument to the kernel's boot loader configuration. To do so,
append "nousb" to the kernel line in
<xhtml:code>/boot/grub/grub.cfg</xhtml:code>
as shown:
<pre xmlns="http://www.w3.org/1999/xhtml">
kernel /vmlinuz-
<i>VERSION</i>
ro vga=ext root=/dev/VolGroup00/LogVol00 rhgb quiet nousb
</pre>
<i xmlns="http://www.w3.org/1999/xhtml">
<b>WARNING:</b>
Disabling all kernel support for USB will cause problems for
systems with USB-based keyboards, mice, or printers. This configuration is
infeasible for systems which require USB devices, which is common.
</i>
Parameter:
[]
Technical Mechanism:
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.8 | Attack Vector: PHYSICAL |
Exploit Score: 0.9 | Attack Complexity: LOW |
Impact Score: 5.9 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:25974 |