Detections
Analytics
Amazon Linux AMI : kernel (ALAS-2019-1222) (SACK Panic) (SACK Slowness)
high Nessus Plugin ID 125955
Language:
Synopsis
The remote Amazon Linux AMI host is missing a security update.Description
CVE-2019-11477 , CVE-2019-11478 and CVE-2019-11479 describe vulnerabilities in the Linux kernel that can be remotely exploited using a specially crafted TCP connection, crashing the targeted system.The latest Amazon Linux AMIs as available in AWS EC2 already contain these kernels and are not vulnerable.
Solution
Run 'yum update kernel' and reboot to update your system.See Also
Plugin Details
Severity: High
ID: 125955
File Name: ala_ALAS-2019-1222.nasl
Version: 1.6
Type: local
Agent: unix
Published: 6/18/2019
Updated: 12/6/2022
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:amazon:linux:kernel, p-cpe:/a:amazon:linux:kernel-debuginfo, p-cpe:/a:amazon:linux:kernel-debuginfo-common-i686, p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64, p-cpe:/a:amazon:linux:kernel-devel, p-cpe:/a:amazon:linux:kernel-headers, p-cpe:/a:amazon:linux:kernel-tools, p-cpe:/a:amazon:linux:kernel-tools-debuginfo, p-cpe:/a:amazon:linux:kernel-tools-devel, p-cpe:/a:amazon:linux:perf, p-cpe:/a:amazon:linux:perf-debuginfo, cpe:/o:amazon:linux
Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 6/13/2019
Vulnerability Publication Date: 6/19/2019
Reference Information
CVE: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479
ALAS: 2019-1222