ID de Prueba:	1.3.6.1.4.1.25623.1.1.2.2016.1026
Categoría:	Huawei EulerOS Local Security Checks
Título:	Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1026)
Resumen:	The remote host is missing an update for the Huawei EulerOS 'kernel' package(s) announced via the EulerOS-SA-2016-1026 advisory.
Descripción:	Summary: The remote host is missing an update for the Huawei EulerOS 'kernel' package(s) announced via the EulerOS-SA-2016-1026 advisory. Vulnerability Insight: It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this flaw to escalate their privileges by tricking the hypervisor to emulate a SYSENTER instruction in 16-bit mode, if the guest OS did not initialize the SYSENTER model-specific registers (MSRs). (CVE-2015-0239) A flaw was found in the way the Linux kernel's perf subsystem retrieved userlevel stack traces on PowerPC systems. A local, unprivileged user could use this flaw to cause a denial of service on the system by creating a special stack layout that would force the perf_callchain_user_64() function into an infinite loop.(CVE-2015-6526) A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privileges on the system.(CVE-2016-0758) Affected Software/OS: 'kernel' package(s) on Huawei EulerOS V2.0SP1. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0239 BugTraq ID: 72842 http://www.securityfocus.com/bid/72842 Debian Security Information: DSA-3170 (Google Search) http://www.debian.org/security/2015/dsa-3170 http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 http://permalink.gmane.org/gmane.linux.kernel.commits.head/502245 http://www.openwall.com/lists/oss-security/2015/01/27/6 RedHat Security Advisories: RHSA-2015:1272 http://rhn.redhat.com/errata/RHSA-2015-1272.html http://www.ubuntu.com/usn/USN-2513-1 http://www.ubuntu.com/usn/USN-2514-1 http://www.ubuntu.com/usn/USN-2515-1 http://www.ubuntu.com/usn/USN-2516-1 http://www.ubuntu.com/usn/USN-2517-1 http://www.ubuntu.com/usn/USN-2518-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-6526 BugTraq ID: 76401 http://www.securityfocus.com/bid/76401 http://www.openwall.com/lists/oss-security/2015/08/18/4 http://www.securitytracker.com/id/1033728 http://www.ubuntu.com/usn/USN-2759-1 http://www.ubuntu.com/usn/USN-2760-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-0758 BugTraq ID: 90626 http://www.securityfocus.com/bid/90626 HPdes Security Advisory: HPSBHF3548 https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555 http://www.openwall.com/lists/oss-security/2016/05/12/9 RedHat Security Advisories: RHSA-2016:1033 http://rhn.redhat.com/errata/RHSA-2016-1033.html RedHat Security Advisories: RHSA-2016:1051 http://rhn.redhat.com/errata/RHSA-2016-1051.html RedHat Security Advisories: RHSA-2016:1055 http://rhn.redhat.com/errata/RHSA-2016-1055.html SuSE Security Announcement: SUSE-SU-2016:1672 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html SuSE Security Announcement: SUSE-SU-2016:1690 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html SuSE Security Announcement: SUSE-SU-2016:1937 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html SuSE Security Announcement: SUSE-SU-2016:1961 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html SuSE Security Announcement: SUSE-SU-2016:1985 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html SuSE Security Announcement: SUSE-SU-2016:1994 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html SuSE Security Announcement: SUSE-SU-2016:1995 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html SuSE Security Announcement: SUSE-SU-2016:2000 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html SuSE Security Announcement: SUSE-SU-2016:2001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html SuSE Security Announcement: SUSE-SU-2016:2002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html SuSE Security Announcement: SUSE-SU-2016:2003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html SuSE Security Announcement: SUSE-SU-2016:2005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html SuSE Security Announcement: SUSE-SU-2016:2006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html SuSE Security Announcement: SUSE-SU-2016:2007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html SuSE Security Announcement: SUSE-SU-2016:2009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html SuSE Security Announcement: SUSE-SU-2016:2010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html SuSE Security Announcement: SUSE-SU-2016:2011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html SuSE Security Announcement: SUSE-SU-2016:2014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html SuSE Security Announcement: SUSE-SU-2016:2105 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html SuSE Security Announcement: openSUSE-SU-2016:1641 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html SuSE Security Announcement: openSUSE-SU-2016:2184 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html http://www.ubuntu.com/usn/USN-2979-4
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.