Test ID:	1.3.6.1.4.1.25623.1.0.841676
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2064-1)
Summary:	The remote host is missing an update for the 'linux' package(s) announced via the USN-2064-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the USN-2064-1 advisory. Vulnerability Insight: Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. (CVE-2013-4345) A flaw was discovered in the Linux kernel's IP Virtual Server (IP_VS) support. A local user with the CAP_NET_ADMIN capability could exploit this flaw to gain additional administrative privileges. (CVE-2013-4588) Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's debugfs filesystem. An administrative local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2013-6378) Nico Golde reported a flaw in the Linux kernel's userspace IO (uio) driver. A local user could exploit this flaw to cause a denial of service (memory corruption) or possibly gain privileges. (CVE-2013-6763) Affected Software/OS: 'linux' package(s) on Ubuntu 10.04. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4345 62740 http://www.securityfocus.com/bid/62740 RHSA-2013:1449 http://rhn.redhat.com/errata/RHSA-2013-1449.html RHSA-2013:1490 http://rhn.redhat.com/errata/RHSA-2013-1490.html RHSA-2013:1645 http://rhn.redhat.com/errata/RHSA-2013-1645.html USN-2064-1 http://www.ubuntu.com/usn/USN-2064-1 USN-2065-1 http://www.ubuntu.com/usn/USN-2065-1 USN-2068-1 http://www.ubuntu.com/usn/USN-2068-1 USN-2070-1 http://www.ubuntu.com/usn/USN-2070-1 USN-2071-1 http://www.ubuntu.com/usn/USN-2071-1 USN-2072-1 http://www.ubuntu.com/usn/USN-2072-1 USN-2074-1 http://www.ubuntu.com/usn/USN-2074-1 USN-2075-1 http://www.ubuntu.com/usn/USN-2075-1 USN-2076-1 http://www.ubuntu.com/usn/USN-2076-1 USN-2109-1 http://www.ubuntu.com/usn/USN-2109-1 USN-2110-1 http://www.ubuntu.com/usn/USN-2110-1 USN-2158-1 http://www.ubuntu.com/usn/USN-2158-1 [linux-crypto] 20130917 [PATCH] ansi_cprng: Fix off by one error in non-block size request http://marc.info/?l=linux-crypto-vger&m=137942122902845&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=1007690 Common Vulnerability Exposure (CVE) ID: CVE-2013-4588 63744 http://www.securityfocus.com/bid/63744 [oss-security] 20131115 Re: CVE request: Linux kernel: net: ipvs stack buffer overflow http://www.openwall.com/lists/oss-security/2013/11/15/12 http://ftp.linux.org.uk/pub/linux/linux-2.6/ChangeLog-2.6.33 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=04bcef2a83f40c6db24222b27a52892cba39dffb https://bugzilla.redhat.com/show_bug.cgi?id=1030800 https://github.com/torvalds/linux/commit/04bcef2a83f40c6db24222b27a52892cba39dffb Common Vulnerability Exposure (CVE) ID: CVE-2013-6378 59262 http://secunia.com/advisories/59262 59309 http://secunia.com/advisories/59309 59406 http://secunia.com/advisories/59406 63886 http://www.securityfocus.com/bid/63886 RHSA-2014:0100 http://rhn.redhat.com/errata/RHSA-2014-0100.html USN-2066-1 http://www.ubuntu.com/usn/USN-2066-1 USN-2067-1 http://www.ubuntu.com/usn/USN-2067-1 USN-2111-1 http://www.ubuntu.com/usn/USN-2111-1 USN-2112-1 http://www.ubuntu.com/usn/USN-2112-1 USN-2114-1 http://www.ubuntu.com/usn/USN-2114-1 USN-2115-1 http://www.ubuntu.com/usn/USN-2115-1 USN-2116-1 http://www.ubuntu.com/usn/USN-2116-1 [oss-security] 20131122 Linux kernel CVE fixes http://www.openwall.com/lists/oss-security/2013/11/22/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 http://linux.oracle.com/errata/ELSA-2014-0771.html http://linux.oracle.com/errata/ELSA-2014-3043.html https://bugzilla.redhat.com/show_bug.cgi?id=1033578 https://github.com/torvalds/linux/commit/a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 openSUSE-SU-2014:0204 http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html openSUSE-SU-2014:0247 http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html Common Vulnerability Exposure (CVE) ID: CVE-2013-6763 http://www.openwall.com/lists/oss-security/2013/11/04/22 http://www.ubuntu.com/usn/USN-2069-1 http://www.ubuntu.com/usn/USN-2073-1
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.