Test ID:	1.3.6.1.4.1.25623.1.0.843518
Category:	Ubuntu Local Security Checks
Title:	Ubuntu Update for linux USN-3641-1
Summary:	The remote host is missing an update for the 'linux'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the referenced advisory. Vulnerability Insight: Nick Peterson discovered that the Linux kernel did not properly handle debug exceptions following a MOV/POP to SS instruction. A local attacker could use this to cause a denial of service (system crash). This issue only affected the amd64 architecture. (CVE-2018-8897) Andy Lutomirski discovered that the KVM subsystem of the Linux kernel did not properly emulate the ICEBP instruction following a MOV/POP to SS instruction. A local attacker in a KVM virtual machine could use this to cause a denial of service (guest VM crash) or possibly escalate privileges inside of the virtual machine. This issue only affected the i386 and amd64 architectures. (CVE-2018-1087) Andy Lutomirski discovered that the Linux kernel did not properly perform error handling on virtualized debug registers. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-1000199) Affected Software/OS: linux on Ubuntu 17.10, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS Solution: Please install the updated packages. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8897 BugTraq ID: 104071 http://www.securityfocus.com/bid/104071 CERT/CC vulnerability note: VU#631579 https://www.kb.cert.org/vuls/id/631579 Debian Security Information: DSA-4196 (Google Search) https://www.debian.org/security/2018/dsa-4196 Debian Security Information: DSA-4201 (Google Search) https://www.debian.org/security/2018/dsa-4201 https://www.exploit-db.com/exploits/44697/ https://www.exploit-db.com/exploits/45024/ http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9 http://openwall.com/lists/oss-security/2018/05/08/1 http://openwall.com/lists/oss-security/2018/05/08/4 https://bugzilla.redhat.com/show_bug.cgi?id=1567074 https://github.com/can1357/CVE-2018-8897/ https://github.com/torvalds/linux/commit/d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9 https://patchwork.kernel.org/patch/10386677/ https://support.apple.com/HT208742 https://svnweb.freebsd.org/base?view=revision&revision=333368 https://www.freebsd.org/security/advisories/FreeBSD-SA-18:06.debugreg.asc https://www.triplefault.io/2018/05/spurious-db-exceptions-with-pop-ss.html https://xenbits.xen.org/xsa/advisory-260.html https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html RedHat Security Advisories: RHSA-2018:1318 https://access.redhat.com/errata/RHSA-2018:1318 RedHat Security Advisories: RHSA-2018:1319 https://access.redhat.com/errata/RHSA-2018:1319 RedHat Security Advisories: RHSA-2018:1345 https://access.redhat.com/errata/RHSA-2018:1345 RedHat Security Advisories: RHSA-2018:1346 https://access.redhat.com/errata/RHSA-2018:1346 RedHat Security Advisories: RHSA-2018:1347 https://access.redhat.com/errata/RHSA-2018:1347 RedHat Security Advisories: RHSA-2018:1348 https://access.redhat.com/errata/RHSA-2018:1348 RedHat Security Advisories: RHSA-2018:1349 https://access.redhat.com/errata/RHSA-2018:1349 RedHat Security Advisories: RHSA-2018:1350 https://access.redhat.com/errata/RHSA-2018:1350 RedHat Security Advisories: RHSA-2018:1351 https://access.redhat.com/errata/RHSA-2018:1351 RedHat Security Advisories: RHSA-2018:1352 https://access.redhat.com/errata/RHSA-2018:1352 RedHat Security Advisories: RHSA-2018:1353 https://access.redhat.com/errata/RHSA-2018:1353 RedHat Security Advisories: RHSA-2018:1354 https://access.redhat.com/errata/RHSA-2018:1354 RedHat Security Advisories: RHSA-2018:1355 https://access.redhat.com/errata/RHSA-2018:1355 RedHat Security Advisories: RHSA-2018:1524 https://access.redhat.com/errata/RHSA-2018:1524 http://www.securitytracker.com/id/1040744 http://www.securitytracker.com/id/1040849 http://www.securitytracker.com/id/1040861 http://www.securitytracker.com/id/1040866 http://www.securitytracker.com/id/1040882 https://usn.ubuntu.com/3641-1/ https://usn.ubuntu.com/3641-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-1087 BugTraq ID: 104127 http://www.securityfocus.com/bid/104127 http://www.openwall.com/lists/oss-security/2018/05/08/5 https://access.redhat.com/security/vulnerabilities/pop_ss http://www.securitytracker.com/id/1040862
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.