The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3674-1 advisory.

  - An information disclosure vulnerability in the kernel UVC driver could enable a local malicious     application to access data outside of its permission levels. This issue is rated as Moderate because it     first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18.
    Android ID: A-33300353. (CVE-2017-0627)

  - A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This     allowed a privileged user to arbitrarily write to a limited range of kernel memory. (CVE-2018-1068)

  - A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel     before 4.14.7 allowing local attackers to cause a system panic and a denial-of-service, related to     RDS_GET_MR and RDS_GET_MR_FOR_DEST. (CVE-2018-7492)

  - The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and     including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb     driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution     in kernel space. (CVE-2018-8781)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
110474	Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3674-1)	Nessus	Ubuntu Local Security Checks	6/12/2018	1/9/2024	high
195722	RHEL 5 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical
195652	RHEL 7 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical
195662	RHEL 6 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical

Detections

Analytics

Plugins Search

high

critical

critical

critical