Test ID:	1.3.6.1.4.1.25623.1.0.841024
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1455-1)
Summary:	The remote host is missing an update for the 'linux-lts-backport-oneiric' package(s) announced via the USN-1455-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-lts-backport-oneiric' package(s) announced via the USN-1455-1 advisory. Vulnerability Insight: A flaw was found in the Linux kernel's KVM (Kernel Virtual Machine) virtual cpu setup. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1601) Steve Grubb reported a flaw with Linux fscaps (file system base capabilities) when used to increase the permissions of a process. For application on which fscaps are in use a local attacker can disable address space randomization to make attacking the process with raised privileges easier. (CVE-2012-2123) A flaw was found in how the Linux kernel passed the replacement session keyring to a child process. An unprivileged local user could exploit this flaw to cause a denial of service (panic). (CVE-2012-2745) Affected Software/OS: 'linux-lts-backport-oneiric' package(s) on Ubuntu 10.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1601 1026897 http://www.securitytracker.com/id?1026897 49928 http://secunia.com/advisories/49928 DSA-2469 http://www.debian.org/security/2012/dsa-2469 RHSA-2012:0571 http://rhn.redhat.com/errata/RHSA-2012-0571.html RHSA-2012:0676 http://rhn.redhat.com/errata/RHSA-2012-0676.html SUSE-SU-2012:1679 https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html [oss-security] 20120329 Re: CVE request -- kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency http://www.openwall.com/lists/oss-security/2012/03/30/1 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6 https://bugzilla.redhat.com/show_bug.cgi?id=808199 https://github.com/torvalds/linux/commit/9c895160d25a76c21b65bad141b08e8d4f99afef openSUSE-SU-2013:0925 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2012-2123 1027072 http://www.securitytracker.com/id?1027072 53166 http://www.securityfocus.com/bid/53166 RHSA-2012:0670 http://rhn.redhat.com/errata/RHSA-2012-0670.html RHSA-2012:0743 http://rhn.redhat.com/errata/RHSA-2012-0743.html [oss-security] 20120419 Re: CVE request: kernel: fcaps: clear the same personality flags as suid when fcaps are used http://www.openwall.com/lists/oss-security/2012/04/20/6 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9445 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3 https://bugzilla.redhat.com/show_bug.cgi?id=806722 https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445 linux-kernel-fcaps-sec-bypass(75043) https://exchange.xforce.ibmcloud.com/vulnerabilities/75043 Common Vulnerability Exposure (CVE) ID: CVE-2012-2745 1027236 http://www.securitytracker.com/id?1027236 50633 http://secunia.com/advisories/50633 50853 http://secunia.com/advisories/50853 50961 http://secunia.com/advisories/50961 54365 http://www.securityfocus.com/bid/54365 RHSA-2012:1064 http://rhn.redhat.com/errata/RHSA-2012-1064.html USN-1567-1 http://www.ubuntu.com/usn/USN-1567-1 USN-1597-1 http://www.ubuntu.com/usn/USN-1597-1 USN-1606-1 http://www.ubuntu.com/usn/USN-1606-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=79549c6dfda0603dba9a70a53467ce62d9335c33 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2 https://bugzilla.redhat.com/show_bug.cgi?id=833428 https://github.com/torvalds/linux/commit/79549c6dfda0603dba9a70a53467ce62d9335c33
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.