ID de Prueba:	1.3.6.1.4.1.25623.1.0.844102
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for linux USN-4069-1
Resumen:	The remote host is missing an update for the 'linux'; package(s) announced via the USN-4069-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the USN-4069-1 advisory. Vulnerability Insight: It was discovered that an integer overflow existed in the Linux kernel when reference counting pages, leading to potential use-after-free issues. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-11487) Jann Horn discovered that a race condition existed in the Linux kernel when performing core dumps. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2019-11599) It was discovered that the ext4 file system implementation in the Linux kernel did not properly zero out memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-11833) It was discovered that the Bluetooth Human Interface Device Protocol (HIDP) implementation in the Linux kernel did not properly verify strings were NULL terminated in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-11884) Affected Software/OS: 'linux' package(s) on Ubuntu 19.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11487 Common Vulnerability Exposure (CVE) ID: CVE-2019-11599 Common Vulnerability Exposure (CVE) ID: CVE-2019-11833 Common Vulnerability Exposure (CVE) ID: CVE-2019-11884
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.