The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3656-1 advisory.

  - Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel     through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified     other impact by triggering failure of audio registration, because a kfree of the usbtv data structure     occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and     free this data structure. (CVE-2017-17975)

  - fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users     to cause a denial of service (BUG) via an application with multiple threads. (CVE-2017-18193)

  - In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS     case when retrieving sset_count data, which allows local users to cause a denial of service (buffer     overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by     incompatibility between hns_get_sset_count and ethtool_get_strings. (CVE-2017-18222)

  - The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that     contains a jump but lacks a user-defined chain, which allows local users to cause a denial of service     (NULL pointer dereference) by leveraging the CAP_NET_RAW or CAP_NET_ADMIN capability, related to     arpt_do_table in net/ipv4/netfilter/arp_tables.c, ipt_do_table in net/ipv4/netfilter/ip_tables.c, and     ip6t_do_table in net/ipv6/netfilter/ip6_tables.c. (CVE-2018-1065)

  - A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This     allowed a privileged user to arbitrarily write to a limited range of kernel memory. (CVE-2018-1068)

  - Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit()     function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of     certain crafted system calls. (CVE-2018-1130)

  - In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the
    _sctp_make_chunk() function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be     exploited to cause a kernel crash. (CVE-2018-5803)

  - The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to     cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation     failure. (CVE-2018-7480)

  - Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux     kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read     accesses to files in the /sys/class/sas_phy directory, as demonstrated by the     /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file. (CVE-2018-7757)

  - Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux     kernel through 4.15.7 allows local users to cause a denial of service (panic) by leveraging root access to     write to the check_interval file in a /sys/devices/system/machinecheck/machinecheck<cpu number> directory.
    NOTE: a third party has indicated that this report is not security relevant (CVE-2018-7995)

  - The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and     including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb     driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution     in kernel space. (CVE-2018-8781)

  - Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux     kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through     4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code.
    (CVE-2018-8822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2, Snapdragon) vulnerabilities (USN-3656-1)

high Nessus Plugin ID 110051

Version 1.10

Version 1.9

Version 1.9

Version 1.10 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.9 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 1.9 Oct 21, 2023, 5:06 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2018-8822") Detection Exploit attributes ("Exploit available" set to "False". "Exploitability ease" set to "No known exploits are available") Plugin metadata Plugin Feed: 202310210506