The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3468-3 advisory.

  - The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service     (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to     arch/x86/kvm/vmx.c and virt/kvm/eventfd.c. (CVE-2017-1000252)

  - The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the     blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
    (CVE-2017-10663)

  - The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows     guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by     leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka     XSA-216. (CVE-2017-10911)

  - The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry     into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial     of service (use-after-free) or possibly have unspecified other impact. (CVE-2017-11176)

  - The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify     that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL     pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.
    (CVE-2017-14340)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS : Linux kernel (GCP) vulnerabilities (USN-3468-3)

high Nessus Plugin ID 104319

Version 3.12