Amazon Linux AMI : kernel (ALAS-2019-1222) (SACK Panic) (SACK Slowness)

High Nessus Plugin ID 125955

Synopsis

The remote Amazon Linux AMI host is missing a security update.

Description

CVE-2019-11477 , CVE-2019-11478 and CVE-2019-11479 describe vulnerabilities in the Linux kernel that can be remotely exploited using a specially crafted TCP connection, crashing the targeted system.

The latest Amazon Linux AMIs as available in AWS EC2 already contain these kernels and are not vulnerable.

Solution

Run 'yum update kernel' and reboot to update your system.

See Also

https://alas.aws.amazon.com/ALAS-2019-1222.html

Plugin Details

Severity: High

ID: 125955

File Name: ala_ALAS-2019-1222.nasl

Version: 1.4

Type: local

Agent: unix

Published: 2019/06/18

Updated: 2020/01/10

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3.0

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:amazon:linux:kernel, p-cpe:/a:amazon:linux:kernel-debuginfo, p-cpe:/a:amazon:linux:kernel-debuginfo-common-i686, p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64, p-cpe:/a:amazon:linux:kernel-devel, p-cpe:/a:amazon:linux:kernel-headers, p-cpe:/a:amazon:linux:kernel-tools, p-cpe:/a:amazon:linux:kernel-tools-debuginfo, p-cpe:/a:amazon:linux:kernel-tools-devel, p-cpe:/a:amazon:linux:perf, p-cpe:/a:amazon:linux:perf-debuginfo, cpe:/o:amazon:linux

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 2019/06/17

Vulnerability Publication Date: 2019/06/19

Reference Information

CVE: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479

ALAS: 2019-1222