Test ID:	1.3.6.1.4.1.25623.1.0.702972
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2972-1)
Summary:	The remote host is missing an update for the Debian 'linux' package(s) announced via the DSA-2972-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'linux' package(s) announced via the DSA-2972-1 advisory. Vulnerability Insight: Andy Lutomirski discovered that the ptrace syscall was not verifying the RIP register to be valid in the ptrace API on x86_64 processors. An unprivileged user could use this flaw to crash the kernel (resulting in denial of service) or for privilege escalation. For the stable distribution (wheezy), this problem has been fixed in version 3.2.60-1+deb7u1. In addition, this update contains several bugfixes originally targeted for the upcoming Wheezy point release. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your linux packages. Affected Software/OS: 'linux' package(s) on Debian 7. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4699 Debian Security Information: DSA-2972 (Google Search) http://www.debian.org/security/2014/dsa-2972 http://www.exploit-db.com/exploits/34134 http://packetstormsecurity.com/files/127573/Linux-Kernel-ptrace-sysret-Local-Privilege-Escalation.html http://www.openwall.com/lists/oss-security/2014/07/04/4 http://openwall.com/lists/oss-security/2014/07/05/4 http://openwall.com/lists/oss-security/2014/07/08/16 http://openwall.com/lists/oss-security/2014/07/08/5 http://www.osvdb.org/108754 http://secunia.com/advisories/59633 http://secunia.com/advisories/59639 http://secunia.com/advisories/59654 http://secunia.com/advisories/60220 http://secunia.com/advisories/60380 http://secunia.com/advisories/60393 http://www.ubuntu.com/usn/USN-2266-1 http://www.ubuntu.com/usn/USN-2267-1 http://www.ubuntu.com/usn/USN-2268-1 http://www.ubuntu.com/usn/USN-2269-1 http://www.ubuntu.com/usn/USN-2270-1 http://www.ubuntu.com/usn/USN-2271-1 http://www.ubuntu.com/usn/USN-2272-1 http://www.ubuntu.com/usn/USN-2273-1 http://www.ubuntu.com/usn/USN-2274-1
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.