ID de Prueba:	1.3.6.1.4.1.25623.1.0.105517
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - Linux kernel vulnerabilities CVE-2015-2925, CVE-2015-5307, and CVE-2015-8104
Resumen:	The remote host is missing a security patch.
Descripción:	Summary: The remote host is missing a security patch. Vulnerability Insight: CVE-2015-2925 The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a 'double-chroot attack'. CVE-2015-5307 The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c. CVE-2015-8104 The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c. Vulnerability Impact: A local user may be able to bypass a container protection mechanism by renaming a directory, or cause a denial-of-service (DoS) to the system by triggering certain exceptions. Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2925 BugTraq ID: 73926 http://www.securityfocus.com/bid/73926 Debian Security Information: DSA-3364 (Google Search) http://www.debian.org/security/2015/dsa-3364 Debian Security Information: DSA-3372 (Google Search) http://www.debian.org/security/2015/dsa-3372 http://permalink.gmane.org/gmane.linux.kernel.containers/29173 http://permalink.gmane.org/gmane.linux.kernel.containers/29177 http://www.openwall.com/lists/oss-security/2015/04/04/4 RedHat Security Advisories: RHSA-2015:2636 http://rhn.redhat.com/errata/RHSA-2015-2636.html RedHat Security Advisories: RHSA-2016:0068 http://rhn.redhat.com/errata/RHSA-2016-0068.html SuSE Security Announcement: SUSE-SU-2015:2194 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html SuSE Security Announcement: SUSE-SU-2015:2292 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html SuSE Security Announcement: SUSE-SU-2016:0335 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html SuSE Security Announcement: SUSE-SU-2016:0337 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html SuSE Security Announcement: SUSE-SU-2016:0380 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html SuSE Security Announcement: SUSE-SU-2016:0381 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html SuSE Security Announcement: SUSE-SU-2016:0383 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html SuSE Security Announcement: SUSE-SU-2016:0384 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html SuSE Security Announcement: SUSE-SU-2016:0386 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html SuSE Security Announcement: SUSE-SU-2016:0387 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html SuSE Security Announcement: SUSE-SU-2016:0434 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html http://www.ubuntu.com/usn/USN-2792-1 http://www.ubuntu.com/usn/USN-2794-1 http://www.ubuntu.com/usn/USN-2795-1 http://www.ubuntu.com/usn/USN-2798-1 http://www.ubuntu.com/usn/USN-2799-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-5307 1034105 http://www.securitytracker.com/id/1034105 77528 http://www.securityfocus.com/bid/77528 DSA-3396 http://www.debian.org/security/2015/dsa-3396 DSA-3414 http://www.debian.org/security/2015/dsa-3414 DSA-3454 http://www.debian.org/security/2016/dsa-3454 FEDORA-2015-394835a3f6 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html FEDORA-2015-668d213dc3 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html FEDORA-2015-f150b2a8c8 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html RHSA-2015:2636 RHSA-2015:2645 http://rhn.redhat.com/errata/RHSA-2015-2645.html RHSA-2016:0046 http://rhn.redhat.com/errata/RHSA-2016-0046.html SUSE-SU-2015:2108 http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html SUSE-SU-2015:2194 SUSE-SU-2015:2339 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html SUSE-SU-2015:2350 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html SUSE-SU-2016:0354 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html SUSE-SU-2016:2074 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html USN-2800-1 http://www.ubuntu.com/usn/USN-2800-1 USN-2801-1 http://www.ubuntu.com/usn/USN-2801-1 USN-2802-1 http://www.ubuntu.com/usn/USN-2802-1 USN-2803-1 http://www.ubuntu.com/usn/USN-2803-1 USN-2804-1 http://www.ubuntu.com/usn/USN-2804-1 USN-2805-1 http://www.ubuntu.com/usn/USN-2805-1 USN-2806-1 http://www.ubuntu.com/usn/USN-2806-1 USN-2807-1 http://www.ubuntu.com/usn/USN-2807-1 [oss-security] 20151110 Re: CVE-2015-5307 kernel: kvm: guest to host DoS by triggering an infinite loop in microcode via #AC exception http://www.openwall.com/lists/oss-security/2015/11/10/6 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed http://support.citrix.com/article/CTX202583 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://xenbits.xen.org/xsa/advisory-156.html https://bugzilla.redhat.com/show_bug.cgi?id=1277172 https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed https://kb.juniper.net/JSA10783 openSUSE-SU-2015:2232 http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html openSUSE-SU-2015:2250 http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8104 BugTraq ID: 77524 http://www.securityfocus.com/bid/77524 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 Debian Security Information: DSA-3414 (Google Search) Debian Security Information: DSA-3426 (Google Search) http://www.debian.org/security/2015/dsa-3426 Debian Security Information: DSA-3454 (Google Search) http://www.openwall.com/lists/oss-security/2015/11/10/5 http://www.openwall.com/lists/oss-security/2023/10/10/4 RedHat Security Advisories: RHSA-2015:2645 RedHat Security Advisories: RHSA-2016:0046 SuSE Security Announcement: SUSE-SU-2015:2108 (Google Search) SuSE Security Announcement: SUSE-SU-2015:2339 (Google Search) SuSE Security Announcement: SUSE-SU-2015:2350 (Google Search) SuSE Security Announcement: SUSE-SU-2016:0354 (Google Search) SuSE Security Announcement: SUSE-SU-2016:2074 (Google Search) SuSE Security Announcement: openSUSE-SU-2015:2232 (Google Search) SuSE Security Announcement: openSUSE-SU-2015:2250 (Google Search) SuSE Security Announcement: openSUSE-SU-2016:1008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html http://www.ubuntu.com/usn/USN-2840-1 http://www.ubuntu.com/usn/USN-2841-1 http://www.ubuntu.com/usn/USN-2841-2 http://www.ubuntu.com/usn/USN-2842-1 http://www.ubuntu.com/usn/USN-2842-2 http://www.ubuntu.com/usn/USN-2843-1 http://www.ubuntu.com/usn/USN-2843-2 http://www.ubuntu.com/usn/USN-2844-1
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.