Test ID:	1.3.6.1.4.1.25623.1.0.842713
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2948-1)
Summary:	The remote host is missing an update for the 'linux-lts-utopic' package(s) announced via the USN-2948-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-lts-utopic' package(s) announced via the USN-2948-1 advisory. Vulnerability Insight: Ralf Spenneberg discovered that the USB driver for Clie devices in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2015-7566) Ralf Spenneberg discovered that the usbvision driver in the Linux kernel did not properly validate the interfaces and endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2015-7833) Venkatesh Pottem discovered a use-after-free vulnerability in the Linux kernel's CXGB3 driver. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8812) It was discovered that a race condition existed in the ioctl handler for the TTY driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2016-0723) Xiaofei Rex Guo discovered a timing side channel vulnerability in the Linux Extended Verification Module (EVM). An attacker could use this to affect system integrity. (CVE-2016-2085) David Herrmann discovered that the Linux kernel incorrectly accounted file descriptors to the original opener for in-flight file descriptors sent over a unix domain socket. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2550) Ralf Spenneberg discovered that the USB driver for Treo devices in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service (system crash). (CVE-2016-2782) It was discovered that the Linux kernel did not enforce limits on the amount of data allocated to buffer pipes. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2847) Affected Software/OS: 'linux-lts-utopic' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7566 20160309 OS-S 2016-09 Linux visor clie_5_attach Nullpointer Dereference CVE-2015-7566 http://www.securityfocus.com/archive/1/537733/100/0/threaded 39540 https://www.exploit-db.com/exploits/39540/ 82975 http://www.securityfocus.com/bid/82975 DSA-3448 http://www.debian.org/security/2016/dsa-3448 DSA-3503 http://www.debian.org/security/2016/dsa-3503 FEDORA-2016-26e19f042a http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html FEDORA-2016-5d43766e33 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html FEDORA-2016-b59fd603be http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html SUSE-SU-2016:1672 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html SUSE-SU-2016:1707 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html SUSE-SU-2016:1764 http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html SUSE-SU-2016:2074 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html USN-2929-1 http://www.ubuntu.com/usn/USN-2929-1 USN-2929-2 http://www.ubuntu.com/usn/USN-2929-2 USN-2930-1 http://www.ubuntu.com/usn/USN-2930-1 USN-2930-2 http://www.ubuntu.com/usn/USN-2930-2 USN-2930-3 http://www.ubuntu.com/usn/USN-2930-3 USN-2932-1 http://www.ubuntu.com/usn/USN-2932-1 USN-2948-1 http://www.ubuntu.com/usn/USN-2948-1 USN-2948-2 http://www.ubuntu.com/usn/USN-2948-2 USN-2967-1 http://www.ubuntu.com/usn/USN-2967-1 USN-2967-2 http://www.ubuntu.com/usn/USN-2967-2 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb3232138e37129e88240a98a1d2aba2187ff57c https://bugzilla.redhat.com/show_bug.cgi?id=1283371 https://bugzilla.redhat.com/show_bug.cgi?id=1296466 https://github.com/torvalds/linux/commit/cb3232138e37129e88240a98a1d2aba2187ff57c https://security-tracker.debian.org/tracker/CVE-2015-7566 Common Vulnerability Exposure (CVE) ID: CVE-2015-7833 BugTraq ID: 77030 http://www.securityfocus.com/bid/77030 Bugtraq: 20151007 Re: Local RedHat Enterprise Linux DoS - RHEL 7.1 Kernel crashes on invalid USB device descriptors (usbvision driver) (Google Search) http://www.securityfocus.com/archive/1/536629 Debian Security Information: DSA-3396 (Google Search) http://www.debian.org/security/2015/dsa-3396 Debian Security Information: DSA-3426 (Google Search) http://www.debian.org/security/2015/dsa-3426 http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf https://bugzilla.redhat.com/show_bug.cgi?id=1201858 http://www.securitytracker.com/id/1034452 SuSE Security Announcement: SUSE-SU-2016:1937 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html SuSE Security Announcement: SUSE-SU-2016:1985 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html SuSE Security Announcement: SUSE-SU-2016:2105 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html SuSE Security Announcement: openSUSE-SU-2016:2184 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html http://www.ubuntu.com/usn/USN-2947-1 http://www.ubuntu.com/usn/USN-2947-2 http://www.ubuntu.com/usn/USN-2947-3 Common Vulnerability Exposure (CVE) ID: CVE-2015-8812 BugTraq ID: 83218 http://www.securityfocus.com/bid/83218 Debian Security Information: DSA-3503 (Google Search) http://www.openwall.com/lists/oss-security/2016/02/11/1 RedHat Security Advisories: RHSA-2016:2574 http://rhn.redhat.com/errata/RHSA-2016-2574.html RedHat Security Advisories: RHSA-2016:2584 http://rhn.redhat.com/errata/RHSA-2016-2584.html SuSE Security Announcement: SUSE-SU-2016:0911 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SuSE Security Announcement: SUSE-SU-2016:1019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html SuSE Security Announcement: SUSE-SU-2016:1031 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html SuSE Security Announcement: SUSE-SU-2016:1032 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html SuSE Security Announcement: SUSE-SU-2016:1033 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html SuSE Security Announcement: SUSE-SU-2016:1034 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html SuSE Security Announcement: SUSE-SU-2016:1035 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html SuSE Security Announcement: SUSE-SU-2016:1037 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html SuSE Security Announcement: SUSE-SU-2016:1038 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html SuSE Security Announcement: SUSE-SU-2016:1039 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html SuSE Security Announcement: SUSE-SU-2016:1040 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html SuSE Security Announcement: SUSE-SU-2016:1041 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html SuSE Security Announcement: SUSE-SU-2016:1045 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html SuSE Security Announcement: SUSE-SU-2016:1046 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html SuSE Security Announcement: SUSE-SU-2016:1102 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html SuSE Security Announcement: SUSE-SU-2016:1764 (Google Search) SuSE Security Announcement: SUSE-SU-2016:2074 (Google Search) SuSE Security Announcement: openSUSE-SU-2016:1008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html http://www.ubuntu.com/usn/USN-2946-1 http://www.ubuntu.com/usn/USN-2946-2 http://www.ubuntu.com/usn/USN-2949-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-0723 1035695 http://www.securitytracker.com/id/1035695 82950 http://www.securityfocus.com/bid/82950 FEDORA-2016-2f25d12c51 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html SUSE-SU-2016:0911 SUSE-SU-2016:1102 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439 http://source.android.com/security/bulletin/2016-07-01.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html https://bugzilla.redhat.com/show_bug.cgi?id=1296253 https://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439 https://security-tracker.debian.org/tracker/CVE-2016-0723 https://support.f5.com/csp/article/K43650115 openSUSE-SU-2016:1008 Common Vulnerability Exposure (CVE) ID: CVE-2016-2085 Common Vulnerability Exposure (CVE) ID: CVE-2016-2550 http://www.openwall.com/lists/oss-security/2016/02/23/2 Common Vulnerability Exposure (CVE) ID: CVE-2016-2782 39539 https://www.exploit-db.com/exploits/39539/ SUSE-SU-2016:1019 SUSE-SU-2016:1690 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html [oss-security] 20160228 Re: CVE request -- linux kernel: visor: crash on invalid USB device descriptors in treo_attach() in visor driver http://www.openwall.com/lists/oss-security/2016/02/28/9 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cac9b50b0d75a1d50d6c056ff65c005f3224c8e0 https://bugzilla.redhat.com/show_bug.cgi?id=1312670 https://github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0 Common Vulnerability Exposure (CVE) ID: CVE-2016-2847 83870 http://www.securityfocus.com/bid/83870 RHSA-2016:2574 RHSA-2016:2584 RHSA-2017:0217 http://rhn.redhat.com/errata/RHSA-2017-0217.html SUSE-SU-2016:1696 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html SUSE-SU-2016:1937 USN-2946-1 USN-2946-2 USN-2947-1 USN-2947-2 USN-2947-3 USN-2949-1 [oss-security] 20160301 CVE request -- linux kernel: pipe: limit the per-user amount of pages allocated in pipes http://www.openwall.com/lists/oss-security/2016/03/01/3 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52 https://bugzilla.redhat.com/show_bug.cgi?id=1313428 https://github.com/torvalds/linux/commit/759c01142a5d0f364a462346168a56de28a80f52 openSUSE-SU-2016:1382 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.