Test ID:	1.3.6.1.4.1.25623.1.0.843040
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3189-2)
Summary:	The remote host is missing an update for the 'linux-lts-xenial' package(s) announced via the USN-3189-2 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-lts-xenial' package(s) announced via the USN-3189-2 advisory. Vulnerability Insight: USN-3189-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10147) Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information. (CVE-2016-8399) Affected Software/OS: 'linux-lts-xenial' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10147 95677 http://www.securityfocus.com/bid/95677 RHSA-2017:1842 https://access.redhat.com/errata/RHSA-2017:1842 RHSA-2017:2077 https://access.redhat.com/errata/RHSA-2017:2077 [linux-crypto] 20161202 Crash in crypto mcryptd http://marc.info/?l=linux-crypto-vger&m=148063683310477&w=2 [oss-security] 20170117 CVE request -- linux kernel: crash by spawning mcrypt(alg) with incompatible algorithm http://www.openwall.com/lists/oss-security/2017/01/17/13 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48a992727d82cb7db076fa15d372178743b1f4cd http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15 https://bugzilla.redhat.com/show_bug.cgi?id=1404200 https://github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd Common Vulnerability Exposure (CVE) ID: CVE-2016-8399 BugTraq ID: 94708 http://www.securityfocus.com/bid/94708 RedHat Security Advisories: RHSA-2017:0817 http://rhn.redhat.com/errata/RHSA-2017-0817.html RedHat Security Advisories: RHSA-2017:0869 https://access.redhat.com/errata/RHSA-2017:0869 RedHat Security Advisories: RHSA-2017:2930 https://access.redhat.com/errata/RHSA-2017:2930 RedHat Security Advisories: RHSA-2017:2931 https://access.redhat.com/errata/RHSA-2017:2931
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.