The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3161-2 advisory.

  - The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local     users to obtain sensitive information from kernel memory by reading a tty data structure. (CVE-2015-8964)

  - drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a     denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted     number of planes in a VIDIOC_DQBUF ioctl call. (CVE-2016-4568)

  - fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount     namespace, which allows local users to cause a denial of service (memory consumption and deadlock) via     MS_BIND mount system calls, as demonstrated by a loop that triggers exponential growth in the number of     mounts. (CVE-2016-6213)

  - The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is     enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M     byte in an undefined instruction. (CVE-2016-8630)

  - drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations,     allows remote attackers to execute arbitrary code via crafted fragmented packets. (CVE-2016-8633)

  - The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to     cause a denial of service (system crash) via a crafted application that makes sendto system calls, related     to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c. (CVE-2016-8645)

  - The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length     checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds     slab access) or possibly have unspecified other impact via crafted SCTP data. (CVE-2016-9555)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3161-2)

critical Nessus Plugin ID 95996

Version 3.9

Version 3.8

Version 3.8

Version 3.9 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 3.8 Oct 21, 2023, 3:09 AM CVSSv2 score source (set to "CVE-2016-9555") Detection Exploit attributes ("Exploit available" set to "False") Plugin metadata Plugin Feed: 202310210309
Version 3.8 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856