Test ID:	1.3.6.1.4.1.25623.1.0.842709
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2946-2)
Summary:	The remote host is missing an update for the 'linux-lts-trusty' package(s) announced via the USN-2946-2 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-lts-trusty' package(s) announced via the USN-2946-2 advisory. Vulnerability Insight: Venkatesh Pottem discovered a use-after-free vulnerability in the Linux kernel's CXGB3 driver. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8812) Xiaofei Rex Guo discovered a timing side channel vulnerability in the Linux Extended Verification Module (EVM). An attacker could use this to affect system integrity. (CVE-2016-2085) David Herrmann discovered that the Linux kernel incorrectly accounted file descriptors to the original opener for in-flight file descriptors sent over a unix domain socket. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2550) It was discovered that the Linux kernel did not enforce limits on the amount of data allocated to buffer pipes. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2847) Affected Software/OS: 'linux-lts-trusty' package(s) on Ubuntu 12.04. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8812 BugTraq ID: 83218 http://www.securityfocus.com/bid/83218 Debian Security Information: DSA-3503 (Google Search) http://www.debian.org/security/2016/dsa-3503 http://www.openwall.com/lists/oss-security/2016/02/11/1 RedHat Security Advisories: RHSA-2016:2574 http://rhn.redhat.com/errata/RHSA-2016-2574.html RedHat Security Advisories: RHSA-2016:2584 http://rhn.redhat.com/errata/RHSA-2016-2584.html SuSE Security Announcement: SUSE-SU-2016:0911 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SuSE Security Announcement: SUSE-SU-2016:1019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html SuSE Security Announcement: SUSE-SU-2016:1031 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html SuSE Security Announcement: SUSE-SU-2016:1032 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html SuSE Security Announcement: SUSE-SU-2016:1033 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html SuSE Security Announcement: SUSE-SU-2016:1034 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html SuSE Security Announcement: SUSE-SU-2016:1035 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html SuSE Security Announcement: SUSE-SU-2016:1037 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html SuSE Security Announcement: SUSE-SU-2016:1038 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html SuSE Security Announcement: SUSE-SU-2016:1039 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html SuSE Security Announcement: SUSE-SU-2016:1040 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html SuSE Security Announcement: SUSE-SU-2016:1041 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html SuSE Security Announcement: SUSE-SU-2016:1045 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html SuSE Security Announcement: SUSE-SU-2016:1046 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html SuSE Security Announcement: SUSE-SU-2016:1102 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html SuSE Security Announcement: SUSE-SU-2016:1764 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html SuSE Security Announcement: SUSE-SU-2016:2074 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html SuSE Security Announcement: openSUSE-SU-2016:1008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html http://www.ubuntu.com/usn/USN-2946-1 http://www.ubuntu.com/usn/USN-2946-2 http://www.ubuntu.com/usn/USN-2947-1 http://www.ubuntu.com/usn/USN-2947-2 http://www.ubuntu.com/usn/USN-2947-3 http://www.ubuntu.com/usn/USN-2948-1 http://www.ubuntu.com/usn/USN-2948-2 http://www.ubuntu.com/usn/USN-2949-1 http://www.ubuntu.com/usn/USN-2967-1 http://www.ubuntu.com/usn/USN-2967-2 Common Vulnerability Exposure (CVE) ID: CVE-2016-2085 Common Vulnerability Exposure (CVE) ID: CVE-2016-2550 http://www.openwall.com/lists/oss-security/2016/02/23/2 Common Vulnerability Exposure (CVE) ID: CVE-2016-2847 83870 http://www.securityfocus.com/bid/83870 DSA-3503 RHSA-2016:2574 RHSA-2016:2584 RHSA-2017:0217 http://rhn.redhat.com/errata/RHSA-2017-0217.html SUSE-SU-2016:1672 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html SUSE-SU-2016:1690 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html SUSE-SU-2016:1696 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html SUSE-SU-2016:1707 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html SUSE-SU-2016:1937 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html SUSE-SU-2016:2074 USN-2946-1 USN-2946-2 USN-2947-1 USN-2947-2 USN-2947-3 USN-2948-1 USN-2948-2 USN-2949-1 USN-2967-1 USN-2967-2 [oss-security] 20160301 CVE request -- linux kernel: pipe: limit the per-user amount of pages allocated in pipes http://www.openwall.com/lists/oss-security/2016/03/01/3 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html https://bugzilla.redhat.com/show_bug.cgi?id=1313428 https://github.com/torvalds/linux/commit/759c01142a5d0f364a462346168a56de28a80f52 openSUSE-SU-2016:1382 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.