Test Kennung:	1.3.6.1.4.1.25623.1.0.105516
Kategorie:	F5 Local Security Checks
Titel:	F5 BIG-IP - Linux kernel vulnerability CVE-2015-7872
Zusammenfassung:	The remote host is missing a security patch.
Beschreibung:	Summary: The remote host is missing a security patch. Vulnerability Insight: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands. Vulnerability Impact: A local user may be able to cause a denial-of-service (DoS) attack on the system by using specially crafted keyctl commands. Solution: See the referenced vendor advisory for a solution. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7872 1034472 http://www.securitytracker.com/id/1034472 77544 http://www.securityfocus.com/bid/77544 DSA-3396 http://www.debian.org/security/2015/dsa-3396 HPSBGN03565 http://marc.info/?l=bugtraq&m=145975164525836&w=2 RHSA-2015:2636 http://rhn.redhat.com/errata/RHSA-2015-2636.html RHSA-2016:0185 http://rhn.redhat.com/errata/RHSA-2016-0185.html RHSA-2016:0212 http://rhn.redhat.com/errata/RHSA-2016-0212.html RHSA-2016:0224 http://rhn.redhat.com/errata/RHSA-2016-0224.html SUSE-SU-2015:2108 http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html SUSE-SU-2015:2194 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html SUSE-SU-2015:2292 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html SUSE-SU-2015:2339 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html SUSE-SU-2015:2350 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html SUSE-SU-2016:0335 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html SUSE-SU-2016:0337 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html SUSE-SU-2016:0354 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html SUSE-SU-2016:0380 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html SUSE-SU-2016:0381 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html SUSE-SU-2016:0383 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html SUSE-SU-2016:0384 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html SUSE-SU-2016:0386 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html SUSE-SU-2016:0387 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html SUSE-SU-2016:0434 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html SUSE-SU-2016:2074 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html USN-2823-1 http://www.ubuntu.com/usn/USN-2823-1 USN-2824-1 http://www.ubuntu.com/usn/USN-2824-1 USN-2826-1 http://www.ubuntu.com/usn/USN-2826-1 USN-2829-1 http://www.ubuntu.com/usn/USN-2829-1 USN-2829-2 http://www.ubuntu.com/usn/USN-2829-2 USN-2840-1 http://www.ubuntu.com/usn/USN-2840-1 USN-2840-2 http://www.ubuntu.com/usn/USN-2840-2 USN-2843-1 http://www.ubuntu.com/usn/USN-2843-1 USN-2843-2 http://www.ubuntu.com/usn/USN-2843-2 USN-2843-3 http://www.ubuntu.com/usn/USN-2843-3 [oss-security] 20151020 Re: CVE request: crash when attempt to garbage collect an uninstantiated keyring - Linux kernel http://www.openwall.com/lists/oss-security/2015/10/20/6 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce1fad2740c648a4340f6f6c391a8a83769d2e8c http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html https://bugzilla.redhat.com/show_bug.cgi?id=1272172 https://bugzilla.redhat.com/show_bug.cgi?id=1272371 https://github.com/torvalds/linux/commit/ce1fad2740c648a4340f6f6c391a8a83769d2e8c https://github.com/torvalds/linux/commit/f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068676 https://source.android.com/security/bulletin/2016-12-01.html openSUSE-SU-2016:1008 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.