The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4342-1 advisory.

    Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades     for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of     service (system crash) or execute arbitrary code. (CVE-2020-11884)

    It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash).
    (CVE-2019-16234)

    Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race     condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose     sensitive information. (CVE-2019-19768)

    It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local     attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of     service (system crash). (CVE-2020-10942)

    It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition.
    A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive     information. (CVE-2020-8648)

    Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check     for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when     mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

    Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash) or     possibly expose sensitive information. (CVE-2020-9383)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4344-1 advisory.

    It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash).
    (CVE-2019-16234)

    It was discovered that the Intel WiMAX 2400 driver in the Linux kernel did not properly deallocate memory     in certain situations. A local attacker could use this to cause a denial of service (kernel memory     exhaustion). (CVE-2019-19051)

    Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race     condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose     sensitive information. (CVE-2019-19768)

    It was discovered that the vhost net driver in the Linux kernel contained a stack buffer overflow. A local     attacker with the ability to perform ioctl() calls on /dev/vhost-net could use this to cause a denial of     service (system crash). (CVE-2020-10942)

    It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition.
    A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive     information. (CVE-2020-8648)

    Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check     for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when     mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

    Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in     some situations. A local attacker could possibly use this to cause a denial of service (system crash) or     possibly expose sensitive information. (CVE-2020-9383)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14354-1 advisory.

  - ** DISPUTED ** An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in     drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel through 5.1.5. It allows local users to cause a     denial of service or possibly have unspecified other impact by changing the value of ioc_number between     two kernel reads of that value, aka a double fetch vulnerability. NOTE: a third party reports that this     is unexploitable because the doubly fetched value is not used. (CVE-2019-12456)

  - A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in     Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly     execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
    (CVE-2019-14896)

  - A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip     driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary     code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and     connects to another STA. (CVE-2019-14897)

  - An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious     USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver. (CVE-2019-15213)

  - An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in     register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service. (CVE-2019-15916)

  - The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is     not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to     arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c. (CVE-2019-18660)

  - The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in     drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local     users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can     possibly result in a privilege escalation. (CVE-2019-18675)

  - A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel     through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering     bfa_port_get_stats() failures, aka CID-0e62395da2bd. (CVE-2019-19066)

  - Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow     attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout()     failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the     htc_connect_service() function, aka CID-853acf7caf10. (CVE-2019-19073)

  - A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel     through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
    (CVE-2019-19074)

  - In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference     because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c     and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122. (CVE-2019-19227)

  - In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB     device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79. (CVE-2019-19523)

  - In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB     device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9. (CVE-2019-19524)

  - In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB     device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e. (CVE-2019-19527)

  - In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB     device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. (CVE-2019-19530)

  - In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB     device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca. (CVE-2019-19531)

  - In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a     malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-     axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c,     drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c,     drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-     tmff.c, and drivers/hid/hid-zpff.c. (CVE-2019-19532)

  - In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB     device in the USB character device driver layer, aka CID-303911cfc5b9. This affects     drivers/usb/core/file.c. (CVE-2019-19537)

  - In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in     kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-     buffer). (CVE-2019-19768)

  - In the Linux kernel through 5.4.6, there is a NULL pointer dereference in     drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related     to a PHY down race condition, aka CID-f70267f379b5. (CVE-2019-19965)

  - In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in     drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
    (CVE-2019-19966)

  - In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which     may cause denial of service, aka CID-1d3ff0950e2b. (CVE-2019-20096)

  - In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family     field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
    (CVE-2020-10942)

  - An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL     pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka     CID-998912346c0d. (CVE-2020-11608)

  - There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in     drivers/tty/vt/vt.c. (CVE-2020-8647)

  - There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common     function in drivers/tty/n_tty.c. (CVE-2020-8648)

  - There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region     function in drivers/video/console/vgacon.c. (CVE-2020-8649)

  - An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to     a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it,     aka CID-2e90ca68b0d2. (CVE-2020-9383)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family     field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
    (CVE-2020-10942)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
136085	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4342-1)	Nessus	Ubuntu Local Security Checks	4/29/2020	8/27/2024	high
136087	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4344-1)	Nessus	Ubuntu Local Security Checks	4/29/2020	8/27/2024	high
150557	SUSE SLES11 Security Update : kernel (SUSE-SU-2020:14354-1)	Nessus	SuSE Local Security Checks	6/10/2021	12/26/2023	critical
223026	Linux Distros Unpatched Vulnerability : CVE-2020-10942	Nessus	Misc.	3/4/2025	7/17/2026	medium
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	9/1/2022	7/22/2025	critical

Detections

Analytics

Plugins Search

high

high

critical

medium

critical