The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3361-1 advisory.

    USN-3358-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04     LTS. Please note that this update changes the Linux HWE kernel to the 4.10 based kernel from Ubuntu 17.04,     superseding the 4.8 based HWE kernel from Ubuntu 16.10.

    Ben Harris discovered that the Linux kernel would strip extended privilege attributes of files when     performing a failed unprivileged system call. A local attacker could use this to cause a denial of     service. (CVE-2015-1350)

    Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta     block groups. An attacker with physical access could use this to specially craft an ext4 image that causes     a denial of service (system crash). (CVE-2016-10208)

    Peter Pi discovered that the colormap handling for frame buffer devices in the Linux kernel contained an     integer overflow. A local attacker could use this to disclose sensitive information (kernel memory).
    (CVE-2016-8405)

    It was discovered that an integer overflow existed in the InfiniBand RDMA over ethernet (RXE) transport     implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2016-8636)

    Vlad Tsyrklevich discovered an integer overflow vulnerability in the VFIO PCI driver for the Linux kernel.
    A local attacker with access to a vfio PCI device file could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2016-9083, CVE-2016-9084)

    CAI Qian discovered that the sysctl implementation in the Linux kernel did not properly perform reference     counting in some situations. An unprivileged attacker could use this to cause a denial of service (system     hang). (CVE-2016-9191)

    It was discovered that the keyring implementation in the Linux kernel in some situations did not prevent     special internal keyrings from being joined by userspace keyrings. A privileged local attacker could use     this to bypass module verification. (CVE-2016-9604)

    Dmitry Vyukov, Andrey Konovalov, Florian Westphal, and Eric Dumazet discovered that the netfiler subsystem     in the Linux kernel mishandled IPv6 packet reassembly. A local user could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2016-9755)

    Andy Lutomirski and Willy Tarreau discovered that the KVM implementation in the Linux kernel did not     properly emulate instructions on the SS segment register. A local attacker in a guest virtual machine     could use this to cause a denial of service (guest OS crash) or possibly gain administrative privileges in     the guest OS. (CVE-2017-2583)

    Dmitry Vyukov discovered that the KVM implementation in the Linux kernel improperly emulated certain     instructions. A local attacker could use this to obtain sensitive information (kernel memory).
    (CVE-2017-2584)

    Dmitry Vyukov discovered that KVM implementation in the Linux kernel improperly emulated the VMXON     instruction. A local attacker in a guest OS could use this to cause a denial of service (memory     consumption) in the host OS. (CVE-2017-2596)

    It was discovered that SELinux in the Linux kernel did not properly handle empty writes to /proc/pid/attr.
    A local attacker could use this to cause a denial of service (system crash). (CVE-2017-2618)

    Daniel Jiang discovered that a race condition existed in the ipv4 ping socket implementation in the Linux     kernel. A local privileged attacker could use this to cause a denial of service (system crash).
    (CVE-2017-2671)

    It was discovered that the freelist-randomization in the SLAB memory allocator allowed duplicate freelist     entries. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-5546)

    It was discovered that the KLSI KL5KUSB105 serial-to-USB device driver in the Linux kernel did not     properly initialize memory related to logging. A local attacker could use this to expose sensitive     information (kernel memory). (CVE-2017-5549)

    It was discovered that a fencepost error existed in the pipe_advance() function in the Linux kernel. A     local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-5550)

    It was discovered that the Linux kernel did not clear the setgid bit during a setxattr call on a tmpfs     filesystem. A local attacker could use this to gain elevated group privileges. (CVE-2017-5551)

    Murray McAllister discovered that an integer overflow existed in the VideoCore DRM driver of the Linux     kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2017-5576)

    Gareth Evans discovered that the shm IPC subsystem in the Linux kernel did not properly restrict mapping     page zero. A local privileged attacker could use this to execute arbitrary code. (CVE-2017-5669)

    Andrey Konovalov discovered an out-of-bounds access in the IPv6 Generic Routing Encapsulation (GRE)     tunneling implementation in the Linux kernel. An attacker could use this to possibly expose sensitive     information. (CVE-2017-5897)

    Andrey Konovalov discovered that the IPv4 implementation in the Linux kernel did not properly handle     invalid IP options in some situations. An attacker could use this to cause a denial of service or possibly     execute arbitrary code. (CVE-2017-5970)

    Di Shen discovered that a race condition existed in the perf subsystem of the Linux kernel. A local     attacker could use this to cause a denial of service or possibly gain administrative privileges.
    (CVE-2017-6001)

    Dmitry Vyukov discovered that the Linux kernel did not properly handle TCP packets with the URG flag. A     remote attacker could use this to cause a denial of service. (CVE-2017-6214)

    Andrey Konovalov discovered that the LLC subsytem in the Linux kernel did not properly set up a destructor     in certain situations. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2017-6345)

    It was discovered that a race condition existed in the AF_PACKET handling code in the Linux kernel. A     local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2017-6346)

    Andrey Konovalov discovered that the IP layer in the Linux kernel made improper assumptions about internal     data layout when performing checksums. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2017-6347)

    Dmitry Vyukov discovered race conditions in the Infrared (IrDA) subsystem in the Linux kernel. A local     attacker could use this to cause a denial of service (deadlock). (CVE-2017-6348)

    Dmitry Vyukov discovered that the generic SCSI (sg) subsystem in the Linux kernel contained a stack-based     buffer overflow. A local attacker with access to an sg device could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2017-7187)

    It was discovered that a NULL pointer dereference existed in the Direct Rendering Manager (DRM) driver for     VMWare devices in the Linux kernel. A local attacker could use this to cause a denial of service (system     crash). (CVE-2017-7261)

    It was discovered that the USB Cypress HID drivers for the Linux kernel did not properly validate reported     information from the device. An attacker with physical access could use this to expose sensitive     information (kernel memory). (CVE-2017-7273)

    Eric Biggers discovered a memory leak in the keyring implementation in the Linux kernel. A local attacker     could use this to cause a denial of service (memory consumption). (CVE-2017-7472)

    It was discovered that an information leak existed in the set_mempolicy and mbind compat syscalls in the     Linux kernel. A local attacker could use this to expose sensitive information (kernel memory).
    (CVE-2017-7616)

    Sabrina Dubroca discovered that the asynchronous cryptographic hash (ahash) implementation in the Linux     kernel did not properly handle a full request queue. A local attacker could use this to cause a denial of     service (infinite recursion). (CVE-2017-7618)

    Tuomas Haanp and Ari Kauppi discovered that the NFSv2 and NFSv3 server implementations in the Linux     kernel did not properly handle certain long RPC replies. A remote attacker could use this to cause a     denial of service (system crash). (CVE-2017-7645)

    Tommi Rantala and Brad Spengler discovered that the memory manager in the Linux kernel did not properly     enforce the CONFIG_STRICT_DEVMEM protection mechanism. A local attacker with access to /dev/mem could use     this to expose sensitive information or possibly execute arbitrary code. (CVE-2017-7889)

    Tuomas Haanp and Ari Kauppi discovered that the NFSv2 and NFSv3 server implementations in the Linux     kernel did not properly check for the end of buffer. A remote attacker could use this to craft requests     that cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-7895)

    It was discovered that an integer underflow existed in the Edgeport USB Serial Converter device driver of     the Linux kernel. An attacker with physical access could use this to expose sensitive information (kernel     memory). (CVE-2017-8924)

    It was discovered that the USB ZyXEL omni.net LCD PLUS driver in the Linux kernel did not properly perform     reference counting. A local attacker could use this to cause a denial of service (tty exhaustion).
    (CVE-2017-8925)

    Jann Horn discovered that bpf in Linux kernel does not restrict the output of the print_bpf_insn function.
    A local attacker could use this to obtain sensitive address information. (CVE-2017-9150)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 4.10.10 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

  - CVE-2017-7618: crypto/ahash.c in the Linux kernel     allowed attackers to cause a denial of service (API     operation calling its own callback, and infinite     recursion) by triggering EBUSY on a full queue     (bnc#1033340).

  - CVE-2016-10318: A missing authorization check in the     fscrypt_process_policy function in fs/crypto/policy.c in     the ext4 and f2fs filesystem encryption support in the     Linux kernel allowed a user to assign an encryption     policy to a directory owned by a different user,     potentially creating a denial of service (bnc#1032435).

  - CVE-2017-7616: Incorrect error handling in the     set_mempolicy and mbind compat syscalls in     mm/mempolicy.c in the Linux kernel allowed local users     to obtain sensitive information from uninitialized stack     data by triggering failure of a certain bitmap operation     (bnc#1033336).

  - CVE-2017-7308: The packet_set_ring function in     net/packet/af_packet.c in the Linux kernel did not     properly validate certain block-size data, which allowed     local users to cause a denial of service (overflow) or     possibly have unspecified other impact via crafted     system calls (bnc#1031579).

  - CVE-2017-2671: The ping_unhash function in     net/ipv4/ping.c in the Linux kernel is too late in     obtaining a certain lock and consequently cannot ensure     that disconnect function calls are safe, which allowed     local users to cause a denial of service (panic) by     leveraging access to the protocol value of IPPROTO_ICMP     in a socket system call (bnc#1031003).

  - CVE-2017-7294: The vmw_surface_define_ioctl function in     drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux     kernel did not validate addition of certain levels data,     which allowed local users to trigger an integer overflow     and out-of-bounds write, and cause a denial of service     (system hang or crash) or possibly gain privileges, via     a crafted ioctl call for a /dev/dri/renderD* device     (bnc#1031440).

  - CVE-2017-7261: The vmw_surface_define_ioctl function in     drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux     kernel did not check for a zero value of certain levels     data, which allowed local users to cause a denial of     service (ZERO_SIZE_PTR dereference, and GPF and possibly     panic) via a crafted ioctl call for a /dev/dri/renderD*     device (bnc#1031052).

  - CVE-2017-7187: The sg_ioctl function in     drivers/scsi/sg.c in the Linux kernel allowed local     users to cause a denial of service (stack-based buffer     overflow) or possibly have unspecified other impact via     a large command size in an SG_NEXT_CMD_LEN ioctl call,     leading to out-of-bounds write access in the sg_write     function (bnc#1030213).

The following non-security bugs were fixed :

  - ata: ahci_xgene: free structure returned by     acpi_get_object_info() (bsc#1033518).

  - doc/README.SUSE: update links to KMP manual

  - ext4: do not perform data journaling when data is     encrypted (bsc#1012876).

  - ext4: fix use-after-iput when fscrypt contexts are     inconsistent (bsc#1012829).

  - ext4: mark inode dirty after converting inline directory     (bsc#1012876).

  - ext4: reject inodes with negative size (bsc#1012876).

  - fs, seqfile: always allow oom killer (bsc#1012876).

  - ipv6: make ECMP route replacement less greedy     (bsc#930399).

  - l2tp: hold tunnel socket when handling control frames in     l2tp_ip and l2tp_ip6 (bsc#1028415).

  - mm: filemap: do not plant shadow entries without radix     tree node (bsc#1012876).

  - netfilter: allow logging from non-init namespaces     (bsc#970083).

  - nfsd4: minor NFSv2/v3 write decoding cleanup     (bsc#1034670 CVE#2017-7645).

  - nfsd: check for oversized NFSv2/v3 arguments     (bsc#1034670 CVE#2017-7645).

  - nfsd: stricter decoding of write-like NFSv2/v3 ops     (bsc#1034670 CVE#2017-7645).

據發現，在某些情況下，Linux 核心中的 keyring 實作未防止特殊的內部 keyring 加入使用者空間 keyring。具權限的本機攻擊者可利用此弱點繞過模組驗證。(CVE-2016-9604) Daniel Jiang 發現 Linux 核心中的 ipv4 ping socket 實作存在爭用情形。具權限的本機攻擊者可利用此缺陷引發拒絕服務 (系統當機)。(CVE-2017-2671) JongHwan Kim 在 Linux 核心的 TCP 堆疊中發現超出邊界讀取。本機攻擊者可利用此問題造成拒絕服務 (系統當機)，或洩漏敏感資訊。(CVE-2017-7277) Eric Biggers 發現 Linux 核心的 keyring 實作發生記憶體洩漏。本機攻擊者可利用此弱點造成拒絕服務 (記憶體消耗)。(CVE-2017-7472) Sabrina Dubroca 發現 Linux 核心中的非同步密碼編譯雜湊 (ahash) 實作未正確處理完整的要求佇列。本機攻擊者可利用此弱點造成拒絕服務 (無限遞迴)。(CVE-2017-7618) Tuomas Haanpaa 和 Ari Kauppi 發現 Linux 核心中的 NFSv2 和 NFSv3 伺服器實作未正確處理某些長 RPC 回覆。遠端攻擊者可利用此弱點造成拒絕服務 (系統當機)。(CVE-2017-7645) Tommi Rantala 和 Brad Spengler 發現 Linux 核心中的記憶體管理員未正確強制 CONFIG_STRICT_DEVMEM 保護機制。具 /dev/mem 存取權的本機攻擊者可利用此弱點洩漏敏感資訊，或可能執行任意程式碼。(CVE-2017-7889) Tuomas Haanpaa 和 Ari Kauppi 發現 Linux 核心中的 NFSv2 和 NFSv3 伺服器實作未正確檢查緩衝區結尾。遠端攻擊者可利用此弱點特製要求，造成拒絕服務 (系統當機)，或可能執行任意程式碼。(CVE-2017-7895) Fabian Grunbichler 發現 Linux 核心中的封包動作 API 實作未正確處理未初始化的資料。本機攻擊者可利用此弱點，造成拒絕服務 (系統當機)，或可能執行任意程式碼。(CVE-2017-7979) 據發現，Linux 核心中的 Conexant USB 驅動程式在某些組態中未正確處理記憶體。本機攻擊者可利用此缺陷造成拒絕服務 (系統當機)。(CVE-2017-8063) 據發現，Linux 核心中的 DVD USB 架構在某些組態中未正確處理記憶體。本機攻擊者可利用此缺陷造成拒絕服務 (系統當機)。(CVE-2017-8064) 據發現，Linux 核心中的 virtio 主控台驅動程式未正確處理記憶體。本機攻擊者可利用此缺陷造成拒絕服務 (系統當機)。(CVE-2017-8067)。請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端 Ubuntu 14.04 LTS 主機上安裝的一個套件受到 USN-3312-2 公告中所提及的多個弱點影響。

  - 在 4.6 版之前的 Linux 核心中，drivers/media/tuners/tuner-xc2028.c 的 xc2028_set_config 函式允許本機使用者透過向量 (忽略來自特定資料結構的韌體名稱) 取得權限，或造成拒絕服務 (釋放後使用)。(CVE-2016-7913)

  - 在 4.5 版之前的 Linux 核心中，net/netfilter/nfnetlink.c 的 nfnetlink_rcv_batch 函式未檢查批次訊息的長度欄位是否足夠大，這讓本機使用者可以利用 CAP_NET_ADMIN 功能從核心記憶體取得敏感資訊，或造成拒絕服務 (無限迴圈或超出邊界讀取)。(CVE-2016-7917)

  在 4.8.11 版以前的 Linux 核心中，net/tipc/msg.c 的 tipc_msg_build 函式未驗證最小片段長度和最大封包大小之間的關係，進而允許本機使用者取得權限或引致拒絕服務 (堆積) -based緩衝區溢位)。(CVE-2016-8632)

  - 在 4.8.11 及之前版本的 Linux 核心中，drivers/vfio/pci/vfio_pci.c 允許本機使用者利用 vfio PCI 裝置檔案的存取權發出 VFIO_DEVICE_SET_IRQS ioctl 呼叫，繞過整數溢位檢查，並引致拒絕服務 (記憶體損毀) 或造成其他不明影響，亦即狀態機器混淆錯誤。(CVE-2016-9083)

  - 在 4.8.11 及之前版本的 Linux 核心中，drivers/vfio/pci/vfio_pci_intrs.c 會誤用 kzalloc 函式，進而允許本機使用者利用 vfio PCI 裝置檔案的存取權，引致拒絕服務 (整數溢位) 或造成其他不明影響。(CVE-2016-9084)

  據發現，root 可取得直接存取內部 keyring 的權限，如 RHEL-7 或「.builtin_trusted_keys」上游中的「dns_resolver」，方法是將之作為其工作階段 keyring 加入。root 可藉此將自有 devising 的新公開金鑰新增到 keyring 中，進而繞過模組簽名驗證。(CVE-2016-9604)

  - 在 4.9.8 之前的 Linux 核心中，arch/x86/kvm/vmx.c 的 nested_vmx_check_vmptr 函式未正確模擬 VMXON 指令，進而允許 KVM L1 來賓 OS 使用者利用不當處理頁面參照，引致拒絕服務 (主機 OS 記憶體消耗)。 (CVE-2017-2596)

  - 在 4.10.8 及之前版本的 Linux 核心中，net/ipv4/ping.c 的 ping_unhash 函式取得特定鎖定為時已晚，因而無法確保中斷連線函式呼叫的安全，進而允許本機使用者利用通訊端系統呼叫中 IPPROTO_ICMP 的通訊協定值存取權，引致拒絕服務 (錯誤)。(CVE-2017-2671)

  - 在 4.9.7 版之前的 Linux 核心中，kernel/events/core.c 內有爭用情形，本機使用者因而得以透過特製的應用程式獲得權限，此特製應用程式會發出同步的 perf_event_open 系統呼叫，將軟體群組移入硬體內容中。注意：此弱點是 CVE-2016-6786 的修正不完整所致。(CVE-2017-6001)

  - 在 4.10.13 版之前的 Linux 核心中，KEYS 子系統允許本機使用者透過一系列 KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring 呼叫，引致拒絕服務 (記憶體消耗)。
    (CVE-2017-7472)

  - 4.10.9 及之前版本的 Linux 核心的 crypto/ahash.c 可讓攻擊者透過在已滿佇列上觸發 EBUSY，引致拒絕服務 (呼叫自身回呼的 API 作業和無限遞迴)。
    (CVE-2017-7618)

  - 在 4.10.11 之前的 Linux 核心中，nfsd 子系統的 NFSv2/NFSv3 伺服器允許遠端攻擊者透過長 RPC 回覆，引致拒絕服務 (系統當機)；此問題與 net/sunrpc/svc.c、fs/nfsd/nfs3xdr.c 和 fs/nfsd/nfsxdr.c 相關。(CVE-2017-7645)

  - 在 3.2 之前的 Linux 核心中，mm 子系統未正確強制執行 CONFIG_STRICT_DEVMEM 保護機制，因而允許本機使用者透過開啟 /dev/mem 檔案 (與 arch/x86/mm/init.c 和 drivers/char/mem.c 有關) 的應用程式來讀取或寫入第一個位元組的核心記憶體位置 (且繞過 slab 配置存取限制)。(CVE-2017-7889)

  - 在 4.10.13 及之前版本的 Linux 核心中，NFSv2 和 NFSv3 伺服器實作缺少對緩衝區結尾的特定檢查，這會讓遠端攻擊者透過特製要求觸髮指標算術錯誤，或可能造成其他不明影響；此問題與 fs/nfsd/nfs3xdr.c 和 fs/nfsd/nfsxdr.c 相關。
    (CVE-2017-7895)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 OracleVM 系統缺少可解決重大安全性更新的必要修補程式：請參閱 Oracle VM 安全性公告 OVMSA-2017-0174 瞭解詳細資料。

在 Linux 核心中發現數個弱點，這些弱點可能會導致權限提升、拒絕服務或造成其他影響。CVE-2016-2188 OpenSource Security 的 Ralf Spenneberg 報告 iowarrior 裝置驅動程式並未充分驗證 USB 描述元。這允許具有特別設計之 USB 裝置的實際存在使用者造成拒絕服務 (損毀)。CVE-2016-9604 發現處理程序可藉由 keyring 子系統，設定特殊的內部 keyring 作為其工作階段 keyring。目前尚未確定此版本核心是否會造成安全性影響。CVE-2016-10200 Baozeng Ding 和 Andrey Konovalov 報告 L2TP 實作中存在爭用情形，此問題可能會損毀限制通訊端表格。本機使用者可利用此問題，造成拒絕服務 (當機) 或可能提升權限。CVE-2017-2647 / CVE-2017-6951 idl3r 報告處理程序可利用 keyring 子系統搜尋「dead」金鑰，藉此造成 NULL 指標解除參照。本機使用者可利用此缺陷造成拒絕服務 (當機)。CVE-2017-2671 Daniel Jiang 在 ping 通訊端實作中發現爭用情形。可存取 ping 通訊端的本機使用者可利用此錯誤造成拒絕服務 (當機)，或可能造成權限提升。依預設，任何使用者均無法存取此功能。CVE-2017-5967 Xing Gao 報告 /proc/timer_list 檔案並未顧慮 PID 名稱空間因素，呈現出所有處理程序的資訊。如果有權限的使用者啟用計時器除錯，此問題會將資訊洩漏給 PID 名稱空間中包含的處理程序。CVE-2017-5970 Andrey Konovalov 發現 IPv4 網路程式碼中存在一個拒絕服務缺陷。如果本機 UDP 或原始通訊端有啟用 IP_RETOPTS 選項，本機或遠端的攻擊者皆可觸發此缺陷。CVE-2017-7184 Chaitin Security Research Lab 發現 net xfrm 子系統未充分驗證重播狀態參數，導致引發堆積緩衝區溢位。具備 CAP_NET_ADMIN 能力的本機使用者可利用此缺陷執行權限提升。CVE-2017-7261 Vladis Dronov 和 Murray McAllister 報告 vmwgfx 驅動程式未充分驗證彩現表面參數。在 Vmware 客戶機中，本機使用者可利用此缺陷造成拒絕服務 (當機)。CVE-2017-7273 Benoit Camredon 報告 hid-cypress 驅動程式未充分驗證 HID 報告。具有特別設計之 USB 裝置的實際存在使用者，可能會利用此問題造成拒絕服務 (當機)。CVE-2017-7294 Li Qiang 報告 vmwgfx 驅動程式未充分驗證彩現表面參數。在 Vmware 客戶機中，本機使用者可利用此缺陷造成拒絕服務 (當機)，或可能執行權限提升。CVE-2017-7308 Andrey Konovalov 報告封包通訊端 (AF_PACKET) 實作未充分驗證緩衝區參數。具備 CAP_NET_RAW 能力的本機使用者可利用此缺陷執行權限提升。CVE-2017-7472 Eric Biggers 報告執行緒可利用 keyring 子系統反覆建立新的執行緒 keyring，造成記憶體洩漏問題。本機使用者可利用此缺陷造成拒絕服務 (記憶體耗盡)。CVE-2017-7616 Chris Salls 報告 set_mempolicy() 和 mbind() 函式的 32 位元 big-endian 相容性實作中存在資訊洩漏。此問題不會影響 Debian 7 LTS 中支援的任何架構。CVE-2017-7618 Sabrina Dubroca 報告密碼編譯雜湊子系統未正確處理提交未對齊的資料給忙碌裝置，會造成無限遞迴。在某些系統上，本機使用者可利用此缺陷造成拒絕服務 (當機)。針對 Debian 7「Wheezy」，這些問題已在 3.2.88-1 版本中修正。此版本亦包括上游版本 3.2.88 的錯誤修正，也修正了 keyring、封包通訊端和密碼編譯雜湊子系統中某些沒有 CVE ID 的舊安全性問題。針對 Debian 8「Jessie」，這些問題絕大多數已在 3.16.43-1 版本中修正，其內含在即將發行的下一個重點版本中。建議您升級 linux 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

ID	Name	Product	Family	Published	Updated	Severity
101929	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3361-1)	Nessus	Ubuntu Local Security Checks	7/24/2017	8/27/2024	critical
99423	Fedora 25 : kernel (2017-26c9ecd7a4)	Nessus	Fedora Local Security Checks	4/18/2017	1/11/2021	high
100044	openSUSE Security Update : the Linux Kernel (openSUSE-2017-562)	Nessus	SuSE Local Security Checks	5/9/2017	1/19/2021	high
100668	Ubuntu 17.04 : linux、linux-raspi2 弱點 (USN-3314-1)	Nessus	Ubuntu Local Security Checks	6/7/2017	1/12/2023	critical
100665	Ubuntu 14.04 LTS：Linux 核心 (Xenial HWE) 弱點 (USN-3312-2)	Nessus	Ubuntu Local Security Checks	6/7/2017	8/27/2024	critical
105248	OracleVM 3.4：Unbreakable /等 (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash)	Nessus	OracleVM Local Security Checks	12/14/2017	1/4/2021	high
99733	Debian DLA-922-1：linux 安全性更新	Nessus	Debian Local Security Checks	5/1/2017	1/11/2021	high

Detections

Analytics

Plugins Search

critical

high

high

critical

critical

high

high