Test ID:	1.3.6.1.4.1.25623.1.0.703448
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 3448-1 (linux - security update)
Summary:	Several vulnerabilities have been;discovered in the Linux kernel that may lead to a privilege escalation or;denial-of-service.;;CVE-2013-4312;Tetsuo Handa discovered that it is possible for a process to open;far more files than the process's limit leading to denial-of-service;conditions.;;CVE-2015-7566;Ralf Spenneberg of OpenSource Security reported that the visor;driver crashes when a specially crafted USB device without bulk-out;endpoint is detected.;;CVE-2015-8767;An SCTP denial-of-service was discovered which can be triggered by a;local attacker during a heartbeat timeout event after the 4-way;handshake.;;CVE-2016-0723;A use-after-free vulnerability was discovered in the TIOCGETD ioctl.;A local attacker could use this flaw for denial-of-service.;;CVE-2016-0728;The Perception Point research team discovered a use-after-free;vulnerability in the keyring facility, possibly leading to local;privilege escalation.
Description:	Summary: Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial-of-service. CVE-2013-4312 Tetsuo Handa discovered that it is possible for a process to open far more files than the process's limit leading to denial-of-service conditions. CVE-2015-7566 Ralf Spenneberg of OpenSource Security reported that the visor driver crashes when a specially crafted USB device without bulk-out endpoint is detected. CVE-2015-8767 An SCTP denial-of-service was discovered which can be triggered by a local attacker during a heartbeat timeout event after the 4-way handshake. CVE-2016-0723 A use-after-free vulnerability was discovered in the TIOCGETD ioctl. A local attacker could use this flaw for denial-of-service. CVE-2016-0728 The Perception Point research team discovered a use-after-free vulnerability in the keyring facility, possibly leading to local privilege escalation. Affected Software/OS: linux on Debian Linux Solution: For the stable distribution (jessie), these problems have been fixed in version 3.16.7-ckt20-1+deb8u3. We recommend that you upgrade your linux packages. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4312 BugTraq ID: 82986 http://www.securityfocus.com/bid/82986 Debian Security Information: DSA-3448 (Google Search) http://www.debian.org/security/2016/dsa-3448 Debian Security Information: DSA-3503 (Google Search) http://www.debian.org/security/2016/dsa-3503 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html RedHat Security Advisories: RHSA-2016:0855 http://rhn.redhat.com/errata/RHSA-2016-0855.html RedHat Security Advisories: RHSA-2016:2574 http://rhn.redhat.com/errata/RHSA-2016-2574.html RedHat Security Advisories: RHSA-2016:2584 http://rhn.redhat.com/errata/RHSA-2016-2584.html http://www.ubuntu.com/usn/USN-2929-1 http://www.ubuntu.com/usn/USN-2929-2 http://www.ubuntu.com/usn/USN-2931-1 http://www.ubuntu.com/usn/USN-2932-1 http://www.ubuntu.com/usn/USN-2967-1 http://www.ubuntu.com/usn/USN-2967-2 Common Vulnerability Exposure (CVE) ID: CVE-2015-7566 BugTraq ID: 82975 http://www.securityfocus.com/bid/82975 Bugtraq: 20160309 OS-S 2016-09 Linux visor clie_5_attach Nullpointer Dereference CVE-2015-7566 (Google Search) http://www.securityfocus.com/archive/1/537733/100/0/threaded https://www.exploit-db.com/exploits/39540/ http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html SuSE Security Announcement: SUSE-SU-2016:1672 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html SuSE Security Announcement: SUSE-SU-2016:1707 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html SuSE Security Announcement: SUSE-SU-2016:1764 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html SuSE Security Announcement: SUSE-SU-2016:2074 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html http://www.ubuntu.com/usn/USN-2930-1 http://www.ubuntu.com/usn/USN-2930-2 http://www.ubuntu.com/usn/USN-2930-3 http://www.ubuntu.com/usn/USN-2948-1 http://www.ubuntu.com/usn/USN-2948-2 Common Vulnerability Exposure (CVE) ID: CVE-2015-8767 BugTraq ID: 80268 http://www.securityfocus.com/bid/80268 http://www.openwall.com/lists/oss-security/2016/01/11/4 RedHat Security Advisories: RHSA-2016:0715 http://rhn.redhat.com/errata/RHSA-2016-0715.html RedHat Security Advisories: RHSA-2016:1277 https://access.redhat.com/errata/RHSA-2016:1277 RedHat Security Advisories: RHSA-2016:1301 https://access.redhat.com/errata/RHSA-2016:1301 RedHat Security Advisories: RHSA-2016:1341 https://access.redhat.com/errata/RHSA-2016:1341 SuSE Security Announcement: SUSE-SU-2016:0911 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SuSE Security Announcement: SUSE-SU-2016:1102 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html SuSE Security Announcement: openSUSE-SU-2016:1008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html Common Vulnerability Exposure (CVE) ID: CVE-2016-0723 BugTraq ID: 82950 http://www.securityfocus.com/bid/82950 http://www.securitytracker.com/id/1035695 Common Vulnerability Exposure (CVE) ID: CVE-2016-0728 BugTraq ID: 81054 http://www.securityfocus.com/bid/81054 https://www.exploit-db.com/exploits/39277/ HPdes Security Advisory: HPSBHF03436 https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05018265 http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/ http://www.openwall.com/lists/oss-security/2016/01/19/2 RedHat Security Advisories: RHSA-2016:0064 http://rhn.redhat.com/errata/RHSA-2016-0064.html RedHat Security Advisories: RHSA-2016:0065 http://rhn.redhat.com/errata/RHSA-2016-0065.html RedHat Security Advisories: RHSA-2016:0068 http://rhn.redhat.com/errata/RHSA-2016-0068.html http://www.securitytracker.com/id/1034701 SuSE Security Announcement: SUSE-SU-2016:0205 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00026.html SuSE Security Announcement: SUSE-SU-2016:0341 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00012.html SuSE Security Announcement: SUSE-SU-2016:0745 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html SuSE Security Announcement: SUSE-SU-2016:0746 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html SuSE Security Announcement: SUSE-SU-2016:0747 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html SuSE Security Announcement: SUSE-SU-2016:0750 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html SuSE Security Announcement: SUSE-SU-2016:0751 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html SuSE Security Announcement: SUSE-SU-2016:0752 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html SuSE Security Announcement: SUSE-SU-2016:0753 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html SuSE Security Announcement: SUSE-SU-2016:0755 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html SuSE Security Announcement: SUSE-SU-2016:0756 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html SuSE Security Announcement: SUSE-SU-2016:0757 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html http://www.ubuntu.com/usn/USN-2870-1 http://www.ubuntu.com/usn/USN-2870-2 http://www.ubuntu.com/usn/USN-2871-1 http://www.ubuntu.com/usn/USN-2871-2 http://www.ubuntu.com/usn/USN-2872-1 http://www.ubuntu.com/usn/USN-2872-2 http://www.ubuntu.com/usn/USN-2872-3 http://www.ubuntu.com/usn/USN-2873-1
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.