Test ID:	1.3.6.1.4.1.25623.1.0.844411
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4346-1)
Summary:	The remote host is missing an update for the 'linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon' package(s) announced via the USN-4346-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon' package(s) announced via the USN-4346-1 advisory. Vulnerability Insight: It was discovered that the QLogic Fibre Channel driver in the Linux kernel did not properly check for error, leading to a NULL pointer dereference. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2019-16233) It was discovered that the Intel Wi-Fi driver in the Linux kernel did not properly check for errors in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2019-16234) Tristan Madani discovered that the block I/O tracing implementation in the Linux kernel contained a race condition. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2019-19768) It was discovered that the virtual terminal implementation in the Linux kernel contained a race condition. A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2020-8648) Jordy Zomer discovered that the floppy driver in the Linux kernel did not properly check for errors in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2020-9383) Affected Software/OS: 'linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon' package(s) on Ubuntu 14.04, Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-16233 https://lkml.org/lkml/2019/9/9/487 SuSE Security Announcement: openSUSE-SU-2019:2444 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html SuSE Security Announcement: openSUSE-SU-2019:2503 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html https://usn.ubuntu.com/4226-1/ https://usn.ubuntu.com/4227-1/ https://usn.ubuntu.com/4227-2/ https://usn.ubuntu.com/4346-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-16234 SuSE Security Announcement: openSUSE-SU-2019:2392 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html https://usn.ubuntu.com/4342-1/ https://usn.ubuntu.com/4344-1/ https://usn.ubuntu.com/4345-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-19768 Debian Security Information: DSA-4698 (Google Search) https://www.debian.org/security/2020/dsa-4698 https://bugzilla.kernel.org/show_bug.cgi?id=205711 https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html SuSE Security Announcement: openSUSE-SU-2020:0388 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html Common Vulnerability Exposure (CVE) ID: CVE-2020-8648 https://bugzilla.kernel.org/show_bug.cgi?id=206361 SuSE Security Announcement: openSUSE-SU-2020:0336 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html Common Vulnerability Exposure (CVE) ID: CVE-2020-9383 https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=2f9ac30a54dc0181ddac3705cdcf4775d863c530 https://github.com/torvalds/linux/commit/2e90ca68b0d2f5548804f22f0dd61145516171e3
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.