Test Kennung:	1.3.6.1.4.1.25623.1.0.844102
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for linux USN-4069-1
Zusammenfassung:	The remote host is missing an update for the 'linux'; package(s) announced via the USN-4069-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the USN-4069-1 advisory. Vulnerability Insight: It was discovered that an integer overflow existed in the Linux kernel when reference counting pages, leading to potential use-after-free issues. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-11487) Jann Horn discovered that a race condition existed in the Linux kernel when performing core dumps. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2019-11599) It was discovered that the ext4 file system implementation in the Linux kernel did not properly zero out memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-11833) It was discovered that the Bluetooth Human Interface Device Protocol (HIDP) implementation in the Linux kernel did not properly verify strings were NULL terminated in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2019-11884) Affected Software/OS: 'linux' package(s) on Ubuntu 19.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11487 Common Vulnerability Exposure (CVE) ID: CVE-2019-11599 Common Vulnerability Exposure (CVE) ID: CVE-2019-11833 Common Vulnerability Exposure (CVE) ID: CVE-2019-11884
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.