Test ID:	1.3.6.1.4.1.25623.1.1.12.2019.4017.2
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4017-2)
Summary:	The remote host is missing an update for the 'linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial' package(s) announced via the USN-4017-2 advisory.
Description:	Summary: The remote host is missing an update for the 'linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial' package(s) announced via the USN-4017-2 advisory. Vulnerability Insight: USN-4017-1 fixed vulnerabilities in the Linux kernel for Ubuntu. This update provides the corresponding updates for the Linux kernel for Ubuntu 16.04 ESM and Ubuntu 14.04 ESM. Jonathan Looney discovered that the TCP retransmission queue implementation in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. (CVE-2019-11478) Jonathan Looney discovered that an integer overflow existed in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service (system crash). (CVE-2019-11477) Affected Software/OS: 'linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial' package(s) on Ubuntu 12.04, Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11477 CERT/CC vulnerability note: VU#905115 https://www.kb.cert.org/vuls/id/905115 http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en http://www.vmware.com/security/advisories/VMSA-2019-0010.html https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 https://kc.mcafee.com/corporate/index?page=content&id=SB10287 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006 https://security.netapp.com/advisory/ntap-20190625-0001/ https://support.f5.com/csp/article/K78234183 https://www.synology.com/security/advisory/Synology_SA_19_28 http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html https://access.redhat.com/security/vulnerabilities/tcpsack https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic https://www.oracle.com/security-alerts/cpujan2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.us-cert.gov/ics/advisories/icsa-19-253-03 http://www.openwall.com/lists/oss-security/2019/06/20/3 http://www.openwall.com/lists/oss-security/2019/06/28/2 http://www.openwall.com/lists/oss-security/2019/07/06/3 http://www.openwall.com/lists/oss-security/2019/07/06/4 http://www.openwall.com/lists/oss-security/2019/10/24/1 http://www.openwall.com/lists/oss-security/2019/10/29/3 RedHat Security Advisories: RHSA-2019:1594 https://access.redhat.com/errata/RHSA-2019:1594 RedHat Security Advisories: RHSA-2019:1602 https://access.redhat.com/errata/RHSA-2019:1602 RedHat Security Advisories: RHSA-2019:1699 https://access.redhat.com/errata/RHSA-2019:1699 Common Vulnerability Exposure (CVE) ID: CVE-2019-11478 Bugtraq: 20190722 [SECURITY] [DSA 4484-1] linux security update (Google Search) https://seclists.org/bugtraq/2019/Jul/30 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0007 https://support.f5.com/csp/article/K26618426 http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=f070ef2ac66716357066b683fb0baf55f8191a2e
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.