Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6494.2
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6494-2)
Summary:	The remote host is missing an update for the 'linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15' package(s) announced via the USN-6494-2 advisory.
Description:	Summary: The remote host is missing an update for the 'linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15' package(s) announced via the USN-6494-2 advisory. Vulnerability Insight: Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-31085) Lucas Leong discovered that the netfilter subsystem in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2023-39189) Sunjoo Park discovered that the netfilter subsystem in the Linux kernel did not properly validate u32 packets content, leading to an out-of-bounds read vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-39192) Lucas Leong discovered that the netfilter subsystem in the Linux kernel did not properly validate SCTP data, leading to an out-of-bounds read vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-39193) Lucas Leong discovered that the Netlink Transformation (XFRM) subsystem in the Linux kernel did not properly handle state filters, leading to an out- of-bounds read vulnerability. A privileged local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-39194) Kyle Zeng discovered that the IPv4 implementation in the Linux kernel did not properly handle socket buffers (skb) when performing IP routing in certain circumstances, leading to a null pointer dereference vulnerability. A privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-42754) It was discovered that the USB ENE card reader driver in the Linux kernel did not properly allocate enough memory when processing the storage device boot blocks. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-45862) Manfred Rudigier discovered that the Intel(R) PCI-Express Gigabit (igb) Ethernet driver in the Linux kernel did not properly validate received frames that are larger than the set MTU size, leading to a buffer overflow vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-45871) Budimir Markovic discovered that the perf subsystem in the Linux kernel did not properly handle event groups, leading to an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-5717) Affected Software/OS: 'linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-31085 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra@nod.at/ Common Vulnerability Exposure (CVE) ID: CVE-2023-39189 RHBZ#2226777 https://bugzilla.redhat.com/show_bug.cgi?id=2226777 RHSA-2024:2394 https://access.redhat.com/errata/RHSA-2024:2394 RHSA-2024:2950 https://access.redhat.com/errata/RHSA-2024:2950 RHSA-2024:3138 https://access.redhat.com/errata/RHSA-2024:3138 https://access.redhat.com/security/cve/CVE-2023-39189 https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2023-39192 RHBZ#2226784 https://bugzilla.redhat.com/show_bug.cgi?id=2226784 https://access.redhat.com/security/cve/CVE-2023-39192 https://www.zerodayinitiative.com/advisories/ZDI-CAN-18408/ Common Vulnerability Exposure (CVE) ID: CVE-2023-39193 RHBZ#2226787 https://bugzilla.redhat.com/show_bug.cgi?id=2226787 https://access.redhat.com/security/cve/CVE-2023-39193 https://www.zerodayinitiative.com/advisories/ZDI-CAN-18866/ Common Vulnerability Exposure (CVE) ID: CVE-2023-39194 RHBZ#2226788 https://bugzilla.redhat.com/show_bug.cgi?id=2226788 https://access.redhat.com/security/cve/CVE-2023-39194 https://www.zerodayinitiative.com/advisories/ZDI-CAN-18111/ Common Vulnerability Exposure (CVE) ID: CVE-2023-42754 RHBZ#2239845 https://bugzilla.redhat.com/show_bug.cgi?id=2239845 https://access.redhat.com/security/cve/CVE-2023-42754 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/ https://seclists.org/oss-sec/2023/q4/14 Common Vulnerability Exposure (CVE) ID: CVE-2023-45862 https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef Common Vulnerability Exposure (CVE) ID: CVE-2023-45871 https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f Common Vulnerability Exposure (CVE) ID: CVE-2023-5717 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/events?id=32671e3799ca2e4590773fd0e63aaa4229e50c06 https://kernel.dance/32671e3799ca2e4590773fd0e63aaa4229e50c06 https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.