The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2379-1 advisory.

  - Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c     in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to     cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that     provides a large amount of (1) EHCI or (2) XHCI data associated with an event. (CVE-2014-3181)

  - The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically     proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides     a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3)     drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6)     drivers/hid/hid-sunplus.c. (CVE-2014-3184)

  - Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in     the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to     execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted     device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.
    (CVE-2014-3185)

  - Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID     device driver in the Linux kernel through 3.16.3, as used in Android on Nexus 7 devices, allows physically     proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a     crafted device that sends a large report. (CVE-2014-3186)

  - The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux     kernel before 3.16.3 does not properly implement garbage collection, which allows local users to cause a     denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact     via multiple keyctl newring operations followed by a keyctl timeout operation. (CVE-2014-3631)

  - The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the     amount of ICB indirection, which allows physically proximate attackers to cause a denial of service     (infinite loop or stack consumption) via a UDF filesystem with a crafted inode. (CVE-2014-6410)

  - Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote     attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other     impact via a long unencrypted auth ticket. (CVE-2014-6416)

  - net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the     possibility of kmalloc failure, which allows remote attackers to cause a denial of service (system crash)     or possibly have unspecified other impact via a long unencrypted auth ticket. (CVE-2014-6417)

  - net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth     replies, which allows remote attackers to cause a denial of service (system crash) or possibly have     unspecified other impact via crafted data from the IP address of a Ceph Monitor. (CVE-2014-6418)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2379-1)

high Nessus Plugin ID 78259

Version 1.15

Version 1.14

Version 1.14

Version 1.15 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.14 Oct 21, 2023, 5:06 AM CVSS metrics ("CVSSv2 score" changed from 7.8 to 7.2. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C" to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 score" set to 8.4) CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (set to "CVE-2014-3631") CVSSv3 score source (set to "CVE-2014-6416") Detection Plugin metadata Plugin Feed: 202310210506
Version 1.14 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856