According to the version of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A race condition was found in the Linux kernel, present     since v3.14-rc1 through v4.12. The race happens between     threads of inotify_handle_event() and vfs_rename()     while running the rename operation against the same     file. As a result of the race the next slab data or the     slab's free list pointer can be corrupted with     attacker-controlled data. (CVE-2017-7533)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3377-2 advisory.

    USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04     LTS.

    Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in     the Linux kernel. An unprivileged local attacker could use this to cause a denial of service (system     crash) or execute arbitrary code. (CVE-2017-7533)

    It was discovered that the Linux kernel did not properly restrict RLIMIT_STACK size. A local attacker     could use this in conjunction with another vulnerability to possibly execute arbitrary code.
    (CVE-2017-1000365)

     discovered that the Virtio GPU driver in the Linux kernel did not properly free memory in some     situations. A local attacker could use this to cause a denial of service (memory consumption).
    (CVE-2017-10810)

     discovered that the RxRPC Kerberos 5 ticket handling code in the Linux kernel did not properly     verify metadata. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2017-7482)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3378-1 advisory.

    Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in     the Linux kernel. An unprivileged local attacker could use this to cause a denial of service (system     crash) or execute arbitrary code. (CVE-2017-7533)

    It was discovered that the Linux kernel did not properly restrict RLIMIT_STACK size. A local attacker     could use this in conjunction with another vulnerability to possibly execute arbitrary code.
    (CVE-2017-1000365)

     discovered that the Virtio GPU driver in the Linux kernel did not properly free memory in some     situations. A local attacker could use this to cause a denial of service (memory consumption).
    (CVE-2017-10810)

     discovered that the RxRPC Kerberos 5 ticket handling code in the Linux kernel did not properly     verify metadata. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2017-7482)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for the Linux Kernel 3.12.62-60_62 fixes several issues.
The following security bugs were fixed :

  - CVE-2017-7533: A bug in inotify code allowed local users     to escalate privilege (bsc#1050751).

  - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd     subsystem in the Linux kernel allowed remote attackers     to cause a denial of service (system crash) via a long     RPC reply, related to net/sunrpc/svc.c,     fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).

  - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in     the Linux kernel allowed local users to gain privileges     or cause a denial of service (double free) by setting     the HDLC line discipline (bsc#1027575).

  - CVE-2017-9242: The __ip6_append_data function in     net/ipv6/ip6_output.c in the Linux kernel is too late in     checking whether an overwrite of an skb data structure     may occur, which allowed local users to cause a denial     of service (system crash) via crafted system calls     (bsc#1042892).

  - CVE-2017-8890: The inet_csk_clone_lock function in     net/ipv4/inet_connection_sock.c in the Linux kernel     allowed attackers to cause a denial of service (double     free) or possibly have unspecified other impact by     leveraging use of the accept system call (bsc#1038564).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for the Linux Kernel 3.12.67-60_64_18 fixes several issues. The following security bugs were fixed :

  - CVE-2017-7533: A bug in inotify code allowed local users     to escalate privilege (bsc#1050751).

  - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd     subsystem in the Linux kernel allowed remote attackers     to cause a denial of service (system crash) via a long     RPC reply, related to net/sunrpc/svc.c,     fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).

  - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in     the Linux kernel allowed local users to gain privileges     or cause a denial of service (double free) by setting     the HDLC line discipline (bsc#1027575).

  - CVE-2017-9242: The __ip6_append_data function in     net/ipv6/ip6_output.c in the Linux kernel is too late in     checking whether an overwrite of an skb data structure     may occur, which allowed local users to cause a denial     of service (system crash) via crafted system calls     (bsc#1042892).

  - CVE-2017-8890: The inet_csk_clone_lock function in     net/ipv4/inet_connection_sock.c in the Linux kernel     allowed attackers to cause a denial of service (double     free) or possibly have unspecified other impact by     leveraging use of the accept system call (bsc#1038564).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

  - CVE-2014-9940     A use-after-free flaw in the voltage and current     regulator driver could allow a local user to cause a     denial of service or potentially escalate privileges.

  - CVE-2017-7346     Li Qiang discovered that the DRM driver for VMware     virtual GPUs does not properly check user-controlled     values in the vmw_surface_define_ioctl() functions for     upper limits. A local user can take advantage of this     flaw to cause a denial of service.

  - CVE-2017-7482     Shi Lei discovered that RxRPC Kerberos 5 ticket handling     code does not properly verify metadata, leading to     information disclosure, denial of service or potentially     execution of arbitrary code.

  - CVE-2017-7533     Fan Wu and Shixiong Zhao discovered a race condition     between inotify events and VFS rename operations     allowing an unprivileged local attacker to cause a     denial of service or escalate privileges.

  - CVE-2017-7541     A buffer overflow flaw in the Broadcom IEEE802.11n PCIe     SoftMAC WLAN driver could allow a local user to cause     kernel memory corruption, leading to a denial of service     or potentially privilege escalation.

  - CVE-2017-7542     An integer overflow vulnerability in the     ip6_find_1stfragopt() function was found allowing a     local attacker with privileges to open raw sockets to     cause a denial of service.

  - CVE-2017-7889     Tommi Rantala and Brad Spengler reported that the mm     subsystem does not properly enforce the     CONFIG_STRICT_DEVMEM protection mechanism, allowing a     local attacker with access to /dev/mem to obtain     sensitive information or potentially execute arbitrary     code.

  - CVE-2017-9605     Murray McAllister discovered that the DRM driver for     VMware virtual GPUs does not properly initialize memory,     potentially allowing a local attacker to obtain     sensitive information from uninitialized kernel memory     via a crafted ioctl call.

  - CVE-2017-10911     / XSA-216

  Anthony Perard of Citrix discovered an information leak flaw in Xen   blkif response handling, allowing a malicious unprivileged guest to   obtain sensitive information from the host or other guests.

  - CVE-2017-11176     It was discovered that the mq_notify() function does not     set the sock pointer to NULL upon entry into the retry     logic. An attacker can take advantage of this flaw     during a userspace close of a Netlink socket to cause a     denial of service or potentially cause other impact.

  - CVE-2017-1000363     Roee Hay reported that the lp driver does not properly     bounds-check passed arguments, allowing a local attacker     with write access to the kernel command line arguments     to execute arbitrary code.

  - CVE-2017-1000365     It was discovered that argument and environment pointers     are not taken properly into account to the imposed size     restrictions on arguments and environmental strings     passed through RLIMIT_STACK/RLIMIT_INFINITY. A local     attacker can take advantage of this flaw in conjunction     with other flaws to execute arbitrary code.

The 4.12.8 stable kernel update contains a number of important fixes across the tree.

----

The 4.12.5 kernel rebase contains new features and many bug fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
102998	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2017-1160)	Nessus	Huawei Local Security Checks	9/8/2017	1/6/2021	high
102196	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3377-2)	Nessus	Ubuntu Local Security Checks	8/4/2017	8/27/2024	high
102197	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3378-1)	Nessus	Ubuntu Local Security Checks	8/4/2017	8/27/2024	high
102251	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2060-1)	Nessus	SuSE Local Security Checks	8/8/2017	1/6/2021	high
102252	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2061-1)	Nessus	SuSE Local Security Checks	8/8/2017	1/6/2021	high
102550	Debian DSA-3945-1 : linux - security update (Stack Clash)	Nessus	Debian Local Security Checks	8/18/2017	1/4/2021	high
102718	Fedora 25 : kernel (2017-73f71456d7)	Nessus	Fedora Local Security Checks	8/24/2017	1/6/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high