Test ID:	1.3.6.1.4.1.25623.1.1.4.2019.0356.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2019:0356-1)
Summary:	The remote host is missing an update for the 'Linux Kernel (Live Patch 25 for SLE 12 SP2)' package(s) announced via the SUSE-SU-2019:0356-1 advisory.
Description:	Summary: The remote host is missing an update for the 'Linux Kernel (Live Patch 25 for SLE 12 SP2)' package(s) announced via the SUSE-SU-2019:0356-1 advisory. Vulnerability Insight: This update for the Linux Kernel 4.4.121-92_95 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947). Affected Software/OS: 'Linux Kernel (Live Patch 25 for SLE 12 SP2)' package(s) on SUSE Linux Enterprise Server 12-SP1, SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Server for SAP Applications 12-SP2. Solution: Please install the updated package(s). CVSS Score: 6.7 CVSS Vector: AV:A/AC:L/Au:S/C:P/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16884 106253 http://www.securityfocus.com/bid/106253 RHSA-2019:1873 https://access.redhat.com/errata/RHSA-2019:1873 RHSA-2019:1891 https://access.redhat.com/errata/RHSA-2019:1891 RHSA-2019:2696 https://access.redhat.com/errata/RHSA-2019:2696 RHSA-2019:2730 https://access.redhat.com/errata/RHSA-2019:2730 RHSA-2019:3309 https://access.redhat.com/errata/RHSA-2019:3309 RHSA-2019:3517 https://access.redhat.com/errata/RHSA-2019:3517 RHSA-2020:0204 https://access.redhat.com/errata/RHSA-2020:0204 USN-3932-1 https://usn.ubuntu.com/3932-1/ USN-3932-2 https://usn.ubuntu.com/3932-2/ USN-3980-1 https://usn.ubuntu.com/3980-1/ USN-3980-2 https://usn.ubuntu.com/3980-2/ USN-3981-1 https://usn.ubuntu.com/3981-1/ USN-3981-2 https://usn.ubuntu.com/3981-2/ [debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html [debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html [debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884 https://patchwork.kernel.org/cover/10733767/ https://patchwork.kernel.org/patch/10733769/ https://support.f5.com/csp/article/K21430012 https://www.oracle.com/security-alerts/cpuApr2021.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.