Test ID:	1.3.6.1.4.1.25623.1.0.843666
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3797-2)
Summary:	The remote host is missing an update for the 'linux-aws, linux-lts-xenial' package(s) announced via the USN-3797-2 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-aws, linux-lts-xenial' package(s) announced via the USN-3797-2 advisory. Vulnerability Insight: USN-3797-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734) It was discovered that an integer overflow existed in the CD-ROM driver of the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-16658) It was discovered that a integer overflow existed in the HID Bluetooth implementation in the Linux kernel that could lead to a buffer overwrite. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-9363) Yves Younan discovered that the CIPSO labeling implementation in the Linux kernel did not properly handle IP header options in some situations. A remote attacker could use this to specially craft network traffic that could cause a denial of service (infinite loop). (CVE-2018-10938) Affected Software/OS: 'linux-aws, linux-lts-xenial' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10938 BugTraq ID: 105154 http://www.securityfocus.com/bid/105154 Debian Security Information: DSA-4308 (Google Search) https://www.debian.org/security/2018/dsa-4308 https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html http://seclists.org/oss-sec/2018/q3/179 http://www.securitytracker.com/id/1041569 https://usn.ubuntu.com/3797-1/ https://usn.ubuntu.com/3797-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-14734 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8 https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8 RedHat Security Advisories: RHSA-2019:0831 https://access.redhat.com/errata/RHSA-2019:0831 RedHat Security Advisories: RHSA-2019:2029 https://access.redhat.com/errata/RHSA-2019:2029 RedHat Security Advisories: RHSA-2019:2043 https://access.redhat.com/errata/RHSA-2019:2043 https://usn.ubuntu.com/3847-1/ https://usn.ubuntu.com/3847-2/ https://usn.ubuntu.com/3847-3/ https://usn.ubuntu.com/3849-1/ https://usn.ubuntu.com/3849-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-16658 BugTraq ID: 105334 http://www.securityfocus.com/bid/105334 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4 https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6 https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4 RedHat Security Advisories: RHSA-2019:4154 https://access.redhat.com/errata/RHSA-2019:4154 https://usn.ubuntu.com/3820-1/ https://usn.ubuntu.com/3820-2/ https://usn.ubuntu.com/3820-3/ https://usn.ubuntu.com/3822-1/ https://usn.ubuntu.com/3822-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-9363 RedHat Security Advisories: RHSA-2018:2948 https://access.redhat.com/errata/RHSA-2018:2948
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.