Ubuntu 12.04 LTS : linux vulnerabilities (USN-2631-1)

Ubuntu Security Notice (C) 2015-2016 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.


Synopsis :

The remote Ubuntu host is missing one or more security-related
patches.

Description :

Jan Beulich discovered the Xen virtual machine subsystem of the Linux
kernel did not properly restrict access to PCI command registers. A
local guest user could exploit this flaw to cause a denial of service
(host crash). (CVE-2015-2150)

A privilege escalation was discovered in the fork syscall via the
int80 entry on 64 bit kernels with 32 bit emulation support. An
unprivileged local attacker could exploit this flaw to increase their
privileges on the system. (CVE-2015-2830)

A memory corruption issue was discovered in AES decryption when using
the Intel AES-NI accelerated code path. A remote attacker could
exploit this flaw to cause a denial of service (system crash) or
potentially escalate privileges on Intel base machines with AEC-GCM
mode IPSec security association. (CVE-2015-3331)

Wen Xu discovered a use-after-free flaw in the Linux kernel's ipv4
ping support. A local user could exploit this flaw to cause a denial
of service (system crash) or gain administrative privileges on the
system. (CVE-2015-3636)

Carl H Lunde discovered missing sanity checks in the the Linux
kernel's UDF file system(CONFIG_UDF_FS). A local attack could exploit
this flaw to cause a denial of service (system crash) by using a
corrupted filesystem image. (CVE-2015-4167).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.

Solution :

Update the affected packages.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 6.9
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Family: Ubuntu Local Security Checks

Nessus Plugin ID: 84119 ()

Bugtraq ID: 73014
73699
74235

CVE ID: CVE-2015-2150
CVE-2015-2830
CVE-2015-3331
CVE-2015-3636
CVE-2015-4167

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now