Test ID:	1.3.6.1.4.1.25623.1.1.12.2022.5580.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-5580-1)
Summary:	The remote host is missing an update for the 'linux-aws' package(s) announced via the USN-5580-1 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-aws' package(s) announced via the USN-5580-1 advisory. Vulnerability Insight: It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655) It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656) It was discovered that the Packet network protocol implementation in the Linux kernel contained an out-of-bounds access. A remote attacker could use this to expose sensitive information (kernel memory). (CVE-2022-20368) Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-36946) Affected Software/OS: 'linux-aws' package(s) on Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-33655 Debian Security Information: DSA-5191 (Google Search) https://www.debian.org/security/2022/dsa-5191 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4 https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html http://www.openwall.com/lists/oss-security/2022/07/19/2 Common Vulnerability Exposure (CVE) ID: CVE-2021-33656 https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel http://www.openwall.com/lists/oss-security/2022/07/19/3 Common Vulnerability Exposure (CVE) ID: CVE-2022-20368 https://source.android.com/security/bulletin/pixel/2022-08-01 Common Vulnerability Exposure (CVE) ID: CVE-2022-36946 Debian Security Information: DSA-5207 (Google Search) https://www.debian.org/security/2022/dsa-5207 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99a63d36cb3ed5ca3aa6fcb64cffbeaf3b0fb164 https://marc.info/?l=netfilter-devel&m=165883202007292&w=2 https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.