ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2016.0429
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2016-0429)
Resumen:	The remote host is missing an update for the 'kernel, kernel-userspace-headers, kmod-vboxadditions, kmod-virtualbox, kmod-xtables-addons' package(s) announced via the MGASA-2016-0429 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel, kernel-userspace-headers, kmod-vboxadditions, kmod-virtualbox, kmod-xtables-addons' package(s) announced via the MGASA-2016-0429 advisory. Vulnerability Insight: This update is based on upstream 4.4.39 and fixes at least the following security issues: Due to lack of size checking on ICMP header length, it is possible to cause out-of-bounds read on stack (CVE-2016-8399) A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (CVE-2016-9576). A use-after-free vulnerability was found in ALSA pcm layer, which allows local users to cause a denial of service, memory corruption, or possibly other unspecified impact (CVE-2016-9794). Other fixes in this update: - fix for HID gamepad DragonRise (mga#19853) - fix for radeon driver crashing on Dell Precision M4800 (mga#19892) For other upstream fixes in this update, see the referenced changelogs. Affected Software/OS: 'kernel, kernel-userspace-headers, kmod-vboxadditions, kmod-virtualbox, kmod-xtables-addons' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8399 BugTraq ID: 94708 http://www.securityfocus.com/bid/94708 RedHat Security Advisories: RHSA-2017:0817 http://rhn.redhat.com/errata/RHSA-2017-0817.html RedHat Security Advisories: RHSA-2017:0869 https://access.redhat.com/errata/RHSA-2017:0869 RedHat Security Advisories: RHSA-2017:2930 https://access.redhat.com/errata/RHSA-2017:2930 RedHat Security Advisories: RHSA-2017:2931 https://access.redhat.com/errata/RHSA-2017:2931 Common Vulnerability Exposure (CVE) ID: CVE-2016-9576 94821 http://www.securityfocus.com/bid/94821 RHSA-2017:0817 RHSA-2017:1842 https://access.redhat.com/errata/RHSA-2017:1842 RHSA-2017:2077 https://access.redhat.com/errata/RHSA-2017:2077 RHSA-2017:2669 https://access.redhat.com/errata/RHSA-2017:2669 SUSE-SU-2016:3146 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html SUSE-SU-2016:3188 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html SUSE-SU-2016:3203 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html SUSE-SU-2016:3217 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html SUSE-SU-2016:3248 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html SUSE-SU-2016:3252 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html [oss-security] 20161209 Linux Kernel use-after-free in SCSI generic device interface http://www.openwall.com/lists/oss-security/2016/12/08/19 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14 https://bugzilla.redhat.com/show_bug.cgi?id=1403145 https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0 openSUSE-SU-2016:3085 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html openSUSE-SU-2016:3086 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html openSUSE-SU-2016:3118 http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html Common Vulnerability Exposure (CVE) ID: CVE-2016-9794 BugTraq ID: 94654 http://www.securityfocus.com/bid/94654 http://www.openwall.com/lists/oss-security/2016/12/03/2 RedHat Security Advisories: RHSA-2016:2574 http://rhn.redhat.com/errata/RHSA-2016-2574.html SuSE Security Announcement: SUSE-SU-2016:3146 (Google Search) SuSE Security Announcement: SUSE-SU-2016:3188 (Google Search) SuSE Security Announcement: SUSE-SU-2016:3203 (Google Search) SuSE Security Announcement: SUSE-SU-2016:3217 (Google Search) SuSE Security Announcement: SUSE-SU-2016:3248 (Google Search) SuSE Security Announcement: SUSE-SU-2016:3252 (Google Search) SuSE Security Announcement: openSUSE-SU-2016:3118 (Google Search)
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.