Test ID:	1.3.6.1.4.1.25623.1.0.843353
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3468-1)
Summary:	The remote host is missing an update for the 'linux, linux-raspi2' package(s) announced via the USN-3468-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux, linux-raspi2' package(s) announced via the USN-3468-1 advisory. Vulnerability Insight: It was discovered that the KVM subsystem in the Linux kernel did not properly bound guest IRQs. A local attacker in a guest VM could use this to cause a denial of service (host system crash). (CVE-2017-1000252) It was discovered that the Flash-Friendly File System (f2fs) implementation in the Linux kernel did not properly validate superblock metadata. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-10663) Anthony Perard discovered that the Xen virtual block driver did not properly initialize some data structures before passing them to user space. A local attacker in a guest VM could use this to expose sensitive information from the host OS or other guest VMs. (CVE-2017-10911) It was discovered that a use-after-free vulnerability existed in the POSIX message queue implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-11176) Dave Chinner discovered that the XFS filesystem did not enforce that the realtime inode flag was settable only on filesystems on a realtime device. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-14340) Affected Software/OS: 'linux, linux-raspi2' package(s) on Ubuntu 17.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000252 BugTraq ID: 101022 http://www.securityfocus.com/bid/101022 Debian Security Information: DSA-3981 (Google Search) http://www.debian.org/security/2017/dsa-3981 RedHat Security Advisories: RHSA-2018:0676 https://access.redhat.com/errata/RHSA-2018:0676 RedHat Security Advisories: RHSA-2018:1062 https://access.redhat.com/errata/RHSA-2018:1062 RedHat Security Advisories: RHSA-2018:1130 https://access.redhat.com/errata/RHSA-2018:1130 Common Vulnerability Exposure (CVE) ID: CVE-2017-10663 BugTraq ID: 100215 http://www.securityfocus.com/bid/100215 Common Vulnerability Exposure (CVE) ID: CVE-2017-10911 BugTraq ID: 99162 http://www.securityfocus.com/bid/99162 Debian Security Information: DSA-3920 (Google Search) http://www.debian.org/security/2017/dsa-3920 Debian Security Information: DSA-3927 (Google Search) http://www.debian.org/security/2017/dsa-3927 Debian Security Information: DSA-3945 (Google Search) http://www.debian.org/security/2017/dsa-3945 https://security.gentoo.org/glsa/201708-03 https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html http://www.securitytracker.com/id/1038720 Common Vulnerability Exposure (CVE) ID: CVE-2017-11176 BugTraq ID: 99919 http://www.securityfocus.com/bid/99919 https://www.exploit-db.com/exploits/45553/ RedHat Security Advisories: RHSA-2017:2918 https://access.redhat.com/errata/RHSA-2017:2918 RedHat Security Advisories: RHSA-2017:2930 https://access.redhat.com/errata/RHSA-2017:2930 RedHat Security Advisories: RHSA-2017:2931 https://access.redhat.com/errata/RHSA-2017:2931 RedHat Security Advisories: RHSA-2018:0169 https://access.redhat.com/errata/RHSA-2018:0169 RedHat Security Advisories: RHSA-2018:3822 https://access.redhat.com/errata/RHSA-2018:3822 Common Vulnerability Exposure (CVE) ID: CVE-2017-14340 BugTraq ID: 100851 http://www.securityfocus.com/bid/100851
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.