This script is Copyright (C) 2008-2016 Tenable Network Security, Inc.
The remote Fedora host is missing a security update.
Update kernel from version 18.104.22.168 to 22.214.171.124:
CVE-2008-3831 An IOCTL in the i915 driver was not properly restricted
to users with the proper capabilities to use it. CVE-2008-4410 The
vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the
Virtual Machine Interface (VMI) in the Linux kernel 126.96.36.199 invokes
write_idt_entry where write_ldt_entry was intended, which allows local
users to cause a denial of service (persistent application failure)
via crafted function calls, related to the Java Runtime Environment
(JRE) experiencing improper LDT selector state, a different
vulnerability than CVE-2008-3247. CVE-2008-3525 The sbni_ioctl
function in drivers/net/wan/sbni.c in the wan subsystem in the Linux
kernel 188.8.131.52 does not check for the CAP_NET_ADMIN capability before
processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3)
SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows
local users to bypass intended capability restrictions. CVE-2008-4554
The do_splice_from function in fs/splice.c in the Linux kernel before
2.6.27 does not reject file descriptors that have the O_APPEND flag
set, which allows local users to bypass append mode and make arbitrary
changes to other locations in the file. CVE-2008-4576 sctp in Linux
kernel before 184.108.40.206 allows remote attackers to cause a denial of
service (OOPS) via an INIT-ACK that states the peer does not support
AUTH, which causes the sctp_process_init function to clean up active
transports and triggers the OOPS when the T1-Init timer expires. Also
fixes these bugs reported against Fedora 9: 465873 - kernel build-id
note corruption 466303 - IPSec kernel lockup. 464613 - 11143
unconditional linker option arch/powerpc/lib/crtsavres.o causes
external module buildfailure 463034 - [sata_nv swncq] kernel
220.127.116.11-29 raid errors: 'md: super_written gets error=-5, uptodate=0'
460550 - Insert key does not work on console since 2.6.26 438606 -
at76 stops working with port to mac80211 466511 - Kernel crash when
using openswan 462919 - kernel 18.104.22.168-19.fc9.x86_64 TT-budget C-1500
DVB card is not longer working 462178 - PCMCIA CF adaptor causes
kernel hang at 'Starting UDEV:'
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
See also :
Update the affected kernel package.
Risk factor :
High / CVSS Base Score : 7.8
CVSS Temporal Score : 6.8
Public Exploit Available : false
Family: Fedora Local Security Checks
Nessus Plugin ID: 34481 (fedora_2008-8980.nasl)
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now