Test ID:	1.3.6.1.4.1.25623.1.0.843039
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3189-1)
Summary:	The remote host is missing an update for the 'linux, linux-raspi2, linux-snapdragon' package(s) announced via the USN-3189-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux, linux-raspi2, linux-snapdragon' package(s) announced via the USN-3189-1 advisory. Vulnerability Insight: Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10147) Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information. (CVE-2016-8399) Affected Software/OS: 'linux, linux-raspi2, linux-snapdragon' package(s) on Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10147 95677 http://www.securityfocus.com/bid/95677 RHSA-2017:1842 https://access.redhat.com/errata/RHSA-2017:1842 RHSA-2017:2077 https://access.redhat.com/errata/RHSA-2017:2077 [linux-crypto] 20161202 Crash in crypto mcryptd http://marc.info/?l=linux-crypto-vger&m=148063683310477&w=2 [oss-security] 20170117 CVE request -- linux kernel: crash by spawning mcrypt(alg) with incompatible algorithm http://www.openwall.com/lists/oss-security/2017/01/17/13 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48a992727d82cb7db076fa15d372178743b1f4cd http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15 https://bugzilla.redhat.com/show_bug.cgi?id=1404200 https://github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd Common Vulnerability Exposure (CVE) ID: CVE-2016-8399 BugTraq ID: 94708 http://www.securityfocus.com/bid/94708 RedHat Security Advisories: RHSA-2017:0817 http://rhn.redhat.com/errata/RHSA-2017-0817.html RedHat Security Advisories: RHSA-2017:0869 https://access.redhat.com/errata/RHSA-2017:0869 RedHat Security Advisories: RHSA-2017:2930 https://access.redhat.com/errata/RHSA-2017:2930 RedHat Security Advisories: RHSA-2017:2931 https://access.redhat.com/errata/RHSA-2017:2931
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.