The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4076-1 advisory.

  - An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout()     and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free. (CVE-2018-20836)

  - A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x     up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size     calculations for the page size calculation. An attacker can use this flaw to crash the system, corrupt     memory, or create other adverse security affects. (CVE-2019-10142)

  - fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the     extent tree block, which might allow local users to obtain sensitive information by reading uninitialized     data in the filesystem. (CVE-2019-11833)

  - The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a     local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command,     because a name field may not end with a '\0' character. (CVE-2019-11884)

  - In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to     seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no     additional execution privileges needed. User interaction is not needed for exploitation. Product: Android     Versions: Android kernel Android ID: A-119769499 (CVE-2019-2054)

  - The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable     to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source,     the is_wlc_event_frame function will cause this frame to be discarded and unprocessed. If the driver     receives the firmware event frame from the host, the appropriate handler is called. This frame validation     can be bypassed if the bus used is USB (for instance by a wifi dongle). This can allow firmware event     frames from a remote source to be processed. In the worst case scenario, by sending specially-crafted WiFi     packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system.
    More typically, this vulnerability will result in denial-of-service conditions. (CVE-2019-9503)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
127097	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4076-1)	Nessus	Ubuntu Local Security Checks	7/26/2019	1/9/2024	high
195722	RHEL 5 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical
195662	RHEL 6 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical

Detections

Analytics

Plugins Search

high

critical

critical