The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3695-1 advisory.

    Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly initialize     the crc32c checksum driver. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2018-1094)

    It was discovered that the cdrom driver in the Linux kernel contained an incorrect bounds check. A local     attacker could use this to expose sensitive information (kernel memory). (CVE-2018-10940)

    Wen Xu discovered that the ext4 file system implementation in the Linux kernel did not properly validate     xattr sizes. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1095)

    Jann Horn discovered that the 32 bit adjtimex() syscall implementation for 64 bit Linux kernels did not     properly initialize memory returned to user space in some situations. A local attacker could use this to     expose sensitive information (kernel memory). (CVE-2018-11508)

    It was discovered that an information leak vulnerability existed in the floppy driver in the Linux kernel.
    A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-7755)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3695-1)

medium Nessus Plugin ID 110894

Version 1.9