The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4209-1 advisory.

  - Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu     5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value     is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this     is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However,     the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which     will fput() vm_file, leading to a refcount underflow. (CVE-2019-15794)

  - An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check     the length of variable elements in a beacon head, leading to a buffer overflow. (CVE-2019-16746)

  - A memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c     in the Linux kernel before 5.3.6 allows attackers to cause a denial of service (memory consumption), aka     CID-78beef629fd9. NOTE: This has been argued as not a valid vulnerability. The upstream commit     78beef629fd9 was reverted (CVE-2019-19076)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
195630	RHEL 8 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
131563	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4209-1)	Nessus	Ubuntu Local Security Checks	12/3/2019	1/9/2024	critical

Detections

Analytics

Plugins Search

high

critical