Ubuntu 14.04 LTS : linux vulnerabilities (USN-3360-1)

Ubuntu Security Notice (C) 2017 Canonical, Inc. / NASL script (C) 2017 Tenable Network Security, Inc.


Synopsis :

The remote Ubuntu host is missing one or more security-related
patches.

Description :

It was discovered that the Linux kernel did not properly initialize a
Wake- on-Lan data structure. A local attacker could use this to expose
sensitive information (kernel memory). (CVE-2014-9900)

It was discovered that the Linux kernel did not properly restrict
access to /proc/iomem. A local attacker could use this to expose
sensitive information. (CVE-2015-8944)

It was discovered that a use-after-free vulnerability existed in the
performance events and counters subsystem of the Linux kernel for
ARM64. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2015-8955)

It was discovered that the SCSI generic (sg) driver in the Linux
kernel contained a double-free vulnerability. A local attacker could
use this to cause a denial of service (system crash). (CVE-2015-8962)

Sasha Levin discovered that a race condition existed in the
performance events and counters subsystem of the Linux kernel when
handling CPU unplug events. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2015-8963)

Tilman Schmidt and Sasha Levin discovered a use-after-free condition
in the TTY implementation in the Linux kernel. A local attacker could
use this to expose sensitive information (kernel memory).
(CVE-2015-8964)

It was discovered that the fcntl64() system call in the Linux kernel
did not properly set memory limits when returning on 32-bit ARM
processors. A local attacker could use this to gain administrative
privileges. (CVE-2015-8966)

It was discovered that the system call table for ARM 64-bit processors
in the Linux kernel was not write-protected. An attacker could use
this in conjunction with another kernel vulnerability to execute
arbitrary code. (CVE-2015-8967)

It was discovered that the generic SCSI block layer in the Linux
kernel did not properly restrict write operations in certain
situations. A local attacker could use this to cause a denial of
service (system crash) or possibly gain administrative privileges.
(CVE-2016-10088)

Alexander Potapenko discovered a race condition in the Advanced Linux
Sound Architecture (ALSA) subsystem in the Linux kernel. A local
attacker could use this to expose sensitive information (kernel
memory). (CVE-2017-1000380)

Li Qiang discovered that the DRM driver for VMware Virtual GPUs in the
Linux kernel did not properly validate some ioctl arguments. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2017-7346)

Tuomas Haanpaa and Ari Kauppi discovered that the NFSv2 and NFSv3
server implementations in the Linux kernel did not properly check for
the end of buffer. A remote attacker could use this to craft requests
that cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-7895)

It was discovered that an integer underflow existed in the Edgeport
USB Serial Converter device driver of the Linux kernel. An attacker
with physical access could use this to expose sensitive information
(kernel memory). (CVE-2017-8924)

It was discovered that the USB ZyXEL omni.net LCD PLUS driver in the
Linux kernel did not properly perform reference counting. A local
attacker could use this to cause a denial of service (tty exhaustion).
(CVE-2017-8925)

Murray McAllister discovered that the DRM driver for VMware Virtual
GPUs in the Linux kernel did not properly initialize memory. A local
attacker could use this to expose sensitive information (kernel
memory). (CVE-2017-9605).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.

Solution :

Update the affected packages.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.4
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now