Test ID:	1.3.6.1.4.1.25623.1.0.704308
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 4308-1 (linux - security update)
Summary:	Several vulnerabilities have been discovered in the Linux kernel that;may lead to a privilege escalation, denial of service or information;leaks.;;CVE-2018-6554;A memory leak in the irda_bind function in the irda subsystem was;discovered. A local user can take advantage of this flaw to cause a;denial of service (memory consumption).;;CVE-2018-6555;A flaw was discovered in the irda_setsockopt function in the irda;subsystem, allowing a local user to cause a denial of service;(use-after-free and system crash).;;CVE-2018-7755;Brian Belleville discovered a flaw in the fd_locked_ioctl function;in the floppy driver in the Linux kernel. The floppy driver copies a;kernel pointer to user memory in response to the FDGETPRM ioctl. A;local user with access to a floppy drive device can take advantage;of this flaw to discover the location kernel code and data.;;Description truncated. Please see the references for more information.
Description:	Summary: Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2018-6554 A memory leak in the irda_bind function in the irda subsystem was discovered. A local user can take advantage of this flaw to cause a denial of service (memory consumption). CVE-2018-6555 A flaw was discovered in the irda_setsockopt function in the irda subsystem, allowing a local user to cause a denial of service (use-after-free and system crash). CVE-2018-7755 Brian Belleville discovered a flaw in the fd_locked_ioctl function in the floppy driver in the Linux kernel. The floppy driver copies a kernel pointer to user memory in response to the FDGETPRM ioctl. A local user with access to a floppy drive device can take advantage of this flaw to discover the location kernel code and data. Description truncated. Please see the references for more information. Affected Software/OS: linux on Debian Linux Solution: For the stable distribution (stretch), these problems have been fixed in version 4.9.110-3+deb9u5. We recommend that you upgrade your linux packages. CVSS Score: 8.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-6554 BugTraq ID: 105302 http://www.securityfocus.com/bid/105302 Debian Security Information: DSA-4308 (Google Search) https://www.debian.org/security/2018/dsa-4308 https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html https://www.spinics.net/lists/stable/msg255030.html https://www.spinics.net/lists/stable/msg255034.html https://usn.ubuntu.com/3775-1/ https://usn.ubuntu.com/3775-2/ https://usn.ubuntu.com/3776-1/ https://usn.ubuntu.com/3776-2/ https://usn.ubuntu.com/3777-1/ https://usn.ubuntu.com/3777-2/ https://usn.ubuntu.com/3777-3/ Common Vulnerability Exposure (CVE) ID: CVE-2018-6555 BugTraq ID: 105304 http://www.securityfocus.com/bid/105304 https://www.spinics.net/lists/stable/msg255031.html https://www.spinics.net/lists/stable/msg255035.html Common Vulnerability Exposure (CVE) ID: CVE-2018-7755 https://lkml.org/lkml/2018/3/7/1116 RedHat Security Advisories: RHSA-2019:2029 https://access.redhat.com/errata/RHSA-2019:2029 RedHat Security Advisories: RHSA-2019:2043 https://access.redhat.com/errata/RHSA-2019:2043 https://usn.ubuntu.com/3695-1/ https://usn.ubuntu.com/3695-2/ https://usn.ubuntu.com/3696-1/ https://usn.ubuntu.com/3696-2/ https://usn.ubuntu.com/3697-1/ https://usn.ubuntu.com/3697-2/ https://usn.ubuntu.com/3698-1/ https://usn.ubuntu.com/3698-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-9363 RedHat Security Advisories: RHSA-2018:2948 https://access.redhat.com/errata/RHSA-2018:2948 https://usn.ubuntu.com/3797-1/ https://usn.ubuntu.com/3797-2/ https://usn.ubuntu.com/3820-1/ https://usn.ubuntu.com/3820-2/ https://usn.ubuntu.com/3820-3/ https://usn.ubuntu.com/3822-1/ https://usn.ubuntu.com/3822-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-9516 https://usn.ubuntu.com/3871-1/ https://usn.ubuntu.com/3871-3/ https://usn.ubuntu.com/3871-4/ https://usn.ubuntu.com/3871-5/
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.