Test ID:	1.3.6.1.4.1.25623.1.0.843821
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3820-2)
Summary:	The remote host is missing an update for the 'linux-azure, linux-gcp, linux-hwe' package(s) announced via the USN-3820-2 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-azure, linux-gcp, linux-hwe' package(s) announced via the USN-3820-2 advisory. Vulnerability Insight: USN-3820-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-15471) It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168) It was discovered that an integer overflow existed in the CD-ROM driver of the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-16658) It was discovered that an integer overflow existed in the HID Bluetooth implementation in the Linux kernel that could lead to a buffer overwrite. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-9363) Affected Software/OS: 'linux-azure, linux-gcp, linux-hwe' package(s) on Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-13168 https://usn.ubuntu.com/3753-1/ https://usn.ubuntu.com/3753-2/ https://usn.ubuntu.com/3820-1/ https://usn.ubuntu.com/3820-2/ https://usn.ubuntu.com/3820-3/ https://usn.ubuntu.com/3822-1/ https://usn.ubuntu.com/3822-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-15471 Debian Security Information: DSA-4313 (Google Search) https://www.debian.org/security/2018/dsa-4313 http://xenbits.xen.org/xsa/advisory-270.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1607 https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html https://usn.ubuntu.com/3819-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-16658 BugTraq ID: 105334 http://www.securityfocus.com/bid/105334 Debian Security Information: DSA-4308 (Google Search) https://www.debian.org/security/2018/dsa-4308 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4 https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6 https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4 https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html RedHat Security Advisories: RHSA-2019:2029 https://access.redhat.com/errata/RHSA-2019:2029 RedHat Security Advisories: RHSA-2019:2043 https://access.redhat.com/errata/RHSA-2019:2043 RedHat Security Advisories: RHSA-2019:4154 https://access.redhat.com/errata/RHSA-2019:4154 https://usn.ubuntu.com/3797-1/ https://usn.ubuntu.com/3797-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-9363 RedHat Security Advisories: RHSA-2018:2948 https://access.redhat.com/errata/RHSA-2018:2948
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.