ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0041
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0041)
Resumen:	The remote host is missing an update for the 'kernel, kmod-virtualbox, kmod-xtables-addons' package(s) announced via the MGASA-2020-0041 advisory.
Descripción:	Summary: The remote host is missing an update for the 'kernel, kmod-virtualbox, kmod-xtables-addons' package(s) announced via the MGASA-2020-0041 advisory. Vulnerability Insight: This update is based on upstream 5.4.12 and fixes at least the following security vulnerabilities: Intel GPU Hardware prior to Gen11 does not clear EU state during a context switch. This can result in information leakage between contexts (CVE-2019-14615). A heap-based buffer overflow was discovered in the Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (CVE-2019-14895). For other fixes in this update, see the referenced changelogs. Affected Software/OS: 'kernel, kmod-virtualbox, kmod-xtables-addons' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-14615 http://seclists.org/fulldisclosure/2020/Mar/31 http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html SuSE Security Announcement: openSUSE-SU-2020:0336 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html https://usn.ubuntu.com/4253-1/ https://usn.ubuntu.com/4253-2/ https://usn.ubuntu.com/4254-1/ https://usn.ubuntu.com/4254-2/ https://usn.ubuntu.com/4255-1/ https://usn.ubuntu.com/4255-2/ https://usn.ubuntu.com/4284-1/ https://usn.ubuntu.com/4285-1/ https://usn.ubuntu.com/4286-1/ https://usn.ubuntu.com/4286-2/ https://usn.ubuntu.com/4287-1/ https://usn.ubuntu.com/4287-2/ Common Vulnerability Exposure (CVE) ID: CVE-2019-14895 FEDORA-2019-8846a1a5a2 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/ FEDORA-2019-91f6e7bb71 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/ RHSA-2020:0328 https://access.redhat.com/errata/RHSA-2020:0328 RHSA-2020:0339 https://access.redhat.com/errata/RHSA-2020:0339 RHSA-2020:0374 https://access.redhat.com/errata/RHSA-2020:0374 RHSA-2020:0375 https://access.redhat.com/errata/RHSA-2020:0375 RHSA-2020:0543 https://access.redhat.com/errata/RHSA-2020:0543 RHSA-2020:0592 https://access.redhat.com/errata/RHSA-2020:0592 RHSA-2020:0609 https://access.redhat.com/errata/RHSA-2020:0609 RHSA-2020:0653 https://access.redhat.com/errata/RHSA-2020:0653 RHSA-2020:0661 https://access.redhat.com/errata/RHSA-2020:0661 RHSA-2020:0664 https://access.redhat.com/errata/RHSA-2020:0664 USN-4225-1 https://usn.ubuntu.com/4225-1/ USN-4225-2 https://usn.ubuntu.com/4225-2/ USN-4226-1 https://usn.ubuntu.com/4226-1/ USN-4227-1 https://usn.ubuntu.com/4227-1/ USN-4227-2 https://usn.ubuntu.com/4227-2/ USN-4228-1 https://usn.ubuntu.com/4228-1/ USN-4228-2 https://usn.ubuntu.com/4228-2/ [debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html [debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14895 https://www.openwall.com/lists/oss-security/2019/11/22/2 openSUSE-SU-2019:2675 http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.