The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6247-1 advisory.

  - An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and     incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted     IRC with nf_conntrack_irc configured. (CVE-2022-2663)

  - A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue     is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation     leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the     identifier assigned to this vulnerability. (CVE-2022-3635)

  - In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows     an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control     configuration that is set up with tc qdisc and tc class commands. This affects qdisc_graft in     net/sched/sch_api.c. (CVE-2022-47929)

  - An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw     exists within the processing of seg6 attributes. The issue results from the improper validation of user-     supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a     privileged local user to disclose sensitive information on affected installations of the Linux kernel.
    (CVE-2023-2860)

  - Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()`     failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace     (CVE-2023-31248)

  - Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register     contents when CAP_NET_ADMIN is in any user or network namespace (CVE-2023-35001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6247-1)

high Nessus Plugin ID 178795

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin Feed: 202401091856
Version 1.2 Dec 25, 2023, 2:08 PM CVSSv2 score source (changed from "CVE-2023-31248" to "CVE-2023-35001") Plugin Feed: 202312251408
Version 1.1 Dec 13, 2023, 4:19 PM CVSSv2 score source (changed from "CVE-2023-35001" to "CVE-2023-31248") Plugin Feed: 202312131619
Version 1.0 Jul 26, 2023, 8:08 AM New Plugin Feed: 202307260808