ID de Prueba:	1.3.6.1.4.1.25623.1.0.844281
Categoría:	Ubuntu Local Security Checks
Título:	Ubuntu Update for linux USN-4228-1
Resumen:	The remote host is missing an update for the 'linux'; package(s) announced via the USN-4228-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the USN-4228-1 advisory. Vulnerability Insight: It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-14895, CVE-2019-14901) It was discovered that a heap-based buffer overflow existed in the Marvell Libertas WLAN Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-14896, CVE-2019-14897) Anthony Steinhauser discovered that the Linux kernel did not properly perform Spectre_RSB mitigations to all processors for PowerPC architecture systems in some situations. A local attacker could use this to expose sensitive information. (CVE-2019-18660) It was discovered that Geschwister Schneider USB CAN interface driver in the Linux kernel did not properly deallocate memory in certain failure conditions. A physically proximate attacker could use this to cause a denial of service (kernel memory exhaustion). (CVE-2019-19052) It was discovered that the driver for memoryless force-feedback input devices in the Linux kernel contained a use-after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2019-19524) It was discovered that the PEAK-System Technique USB driver in the Linux kernel did not properly sanitize memory before sending it to the device. A physically proximate attacker could use this to expose sensitive information (kernel memory). (CVE-2019-19534) Affected Software/OS: 'linux' package(s) on Ubuntu 16.04 LTS. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-14895 Common Vulnerability Exposure (CVE) ID: CVE-2019-14901 Common Vulnerability Exposure (CVE) ID: CVE-2019-14896 Common Vulnerability Exposure (CVE) ID: CVE-2019-14897 Common Vulnerability Exposure (CVE) ID: CVE-2019-18660 Common Vulnerability Exposure (CVE) ID: CVE-2019-19052 Common Vulnerability Exposure (CVE) ID: CVE-2019-19524 Common Vulnerability Exposure (CVE) ID: CVE-2019-19534
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.