Detections
Analytics

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2420-1)

medium Nessus Plugin ID 79435

Language:

Synopsis

The remote Ubuntu host is missing one or more security updates.

Description

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2420-1 advisory.

 - arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU. (CVE-2014-3690)

 - Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says the Linux kernel is *not* affected; media hype. (CVE-2014-4608)

 - The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certain locations of a chroot directory, which allows local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call.
 (CVE-2014-7970)

 - The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability for do_remount_sb calls that change the root filesystem to read-only, which allows local users to cause a denial of service (loss of writability) by making certain unshare system calls, clearing the / MNT_LOCKED flag, and making an MNT_FORCE umount system call. (CVE-2014-7975)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected kernel package.

See Also

https://ubuntu.com/security/notices/USN-2420-1

Plugin Details

Severity: Medium

ID: 79435

File Name: ubuntu_USN-2420-1.nasl

Version: 1.20

Type: local

Agent: unix

Published: 11/25/2014

Updated: 1/9/2024

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2014-4608

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2014-7975

Vulnerability Information

CPE: p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-generic, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-generic-lpae, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-lowlatency, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-powerpc-e500, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-powerpc-e500mc, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-powerpc-smp, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-powerpc64-emb, p-cpe:/a:canonical:ubuntu_linux:linux-image-3.13.0-40-powerpc64-smp, cpe:/o:canonical:ubuntu_linux:14.04:-:lts

Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/24/2014

Vulnerability Publication Date: 7/3/2014

Reference Information

CVE: CVE-2014-3690, CVE-2014-4608, CVE-2014-7970, CVE-2014-7975

BID: 68214, 70314, 70319, 70691

USN: 2420-1