Test ID:	1.3.6.1.4.1.25623.1.1.12.2014.2421.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2421-1)
Summary:	The remote host is missing an update for the 'linux' package(s) announced via the USN-2421-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux' package(s) announced via the USN-2421-1 advisory. Vulnerability Insight: A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual Machine) subsystem handles the CR4 control register at VM entry on Intel processors. A local host OS user can exploit this to cause a denial of service (kill arbitrary processes, or system disruption) by leveraging /dev/kvm access. (CVE-2014-3690) Don Bailey discovered a flaw in the LZO decompress algorithm used by the Linux kernel. An attacker could exploit this flaw to cause a denial of service (memory corruption or OOPS). (CVE-2014-4608) Andy Lutomirski discovered that the Linux kernel was not checking the CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could exploit this flaw to cause a denial of service (loss of writability). (CVE-2014-7975) Affected Software/OS: 'linux' package(s) on Ubuntu 14.10. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3690 60174 http://secunia.com/advisories/60174 70691 http://www.securityfocus.com/bid/70691 DSA-3060 http://www.debian.org/security/2014/dsa-3060 MDVSA-2015:058 http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 RHSA-2015:0290 http://rhn.redhat.com/errata/RHSA-2015-0290.html RHSA-2015:0782 http://rhn.redhat.com/errata/RHSA-2015-0782.html RHSA-2015:0864 http://rhn.redhat.com/errata/RHSA-2015-0864.html SUSE-SU-2015:0178 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00035.html SUSE-SU-2015:0481 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html SUSE-SU-2015:0736 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html USN-2417-1 http://www.ubuntu.com/usn/USN-2417-1 USN-2418-1 http://www.ubuntu.com/usn/USN-2418-1 USN-2419-1 http://www.ubuntu.com/usn/USN-2419-1 USN-2420-1 http://www.ubuntu.com/usn/USN-2420-1 USN-2421-1 http://www.ubuntu.com/usn/USN-2421-1 [oss-security] 20141021 CVE-2014-3690: KVM DoS triggerable by malicious host userspace http://www.openwall.com/lists/oss-security/2014/10/21/4 [oss-security] 20141029 Re: CVE-2014-3690: KVM DoS triggerable by malicious host userspace http://www.openwall.com/lists/oss-security/2014/10/29/7 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d974baa398f34393db76be45f7d4d04fbdbb4a0a http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2 https://bugzilla.redhat.com/show_bug.cgi?id=1153322 https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a openSUSE-SU-2015:0566 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html Common Vulnerability Exposure (CVE) ID: CVE-2014-4608 BugTraq ID: 68214 http://www.securityfocus.com/bid/68214 http://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html http://www.oberhumer.com/opensource/lzo/ https://www.securitymouse.com/lms-2014-06-16-2 http://www.openwall.com/lists/oss-security/2014/06/26/21 RedHat Security Advisories: RHSA-2015:0062 http://rhn.redhat.com/errata/RHSA-2015-0062.html http://secunia.com/advisories/60011 http://secunia.com/advisories/62633 SuSE Security Announcement: SUSE-SU-2015:0481 (Google Search) SuSE Security Announcement: SUSE-SU-2015:0736 (Google Search) SuSE Security Announcement: openSUSE-SU-2015:0566 (Google Search) http://www.ubuntu.com/usn/USN-2416-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-7975 BugTraq ID: 70314 http://www.securityfocus.com/bid/70314 http://www.openwall.com/lists/oss-security/2014/10/08/22 http://thread.gmane.org/gmane.linux.kernel.stable/109312 RedHat Security Advisories: RHSA-2017:1842 https://access.redhat.com/errata/RHSA-2017:1842 RedHat Security Advisories: RHSA-2017:2077 https://access.redhat.com/errata/RHSA-2017:2077 http://www.securitytracker.com/id/1031180 http://secunia.com/advisories/61145 http://secunia.com/advisories/62634 http://www.ubuntu.com/usn/USN-2415-1 XForce ISS Database: linux-kernel-cve20147975-dos(96994) https://exchange.xforce.ibmcloud.com/vulnerabilities/96994
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.