Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.DEBIAN_DSA-4698.NASL
HistoryJun 11, 2020 - 12:00 a.m.

Debian DSA-4698-1 : linux - security update

2020-06-1100:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
47
privilege escalation
denial of service
information leaks
arm64
ieee 802.11
filesystem
debugfs
blktrace
tw5864 media driver
rdrand
rdseed
intel processors
kvm implementation
l2 guests
filesystem core
mmio out-of-bounds access
virtual terminal driver

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.01

Percentile

83.7%

JSON

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

  • CVE-2019-2182 Hanjun Guo and Lei Li reported a race condition in the arm64 virtual memory management code, which could lead to an information disclosure, denial of service (crash), or possibly privilege escalation.

  • CVE-2019-5108 Mitchell Frank of Cisco discovered that when the IEEE 802.11 (WiFi) stack was used in AP mode with roaming, it would trigger roaming for a newly associated station before the station was authenticated. An attacker within range of the AP could use this to cause a denial of service, either by filling up a switching table or by redirecting traffic away from other stations.

  • CVE-2019-19319 Jungyeon discovered that a crafted filesystem can cause the ext4 implementation to deallocate or reallocate journal blocks. A user permitted to mount filesystems could use this to cause a denial of service (crash), or possibly for privilege escalation.

  • CVE-2019-19462 The syzbot tool found a missing error check in the ‘relay’ library used to implement various files under debugfs. A local user permitted to access debugfs could use this to cause a denial of service (crash) or possibly for privilege escalation.

  • CVE-2019-19768 Tristan Madani reported a race condition in the blktrace debug facility that could result in a use-after-free. A local user able to trigger removal of block devices could possibly use this to cause a denial of service (crash) or for privilege escalation.

  • CVE-2019-20806 A potential NULL pointer dereference was discovered in the tw5864 media driver. The security impact of this is unclear.

  • CVE-2019-20811 The Hulk Robot tool found a reference-counting bug in an error path in the network subsystem. The security impact of this is unclear.

  • CVE-2020-0543 Researchers at VU Amsterdam discovered that on some Intel CPUs supporting the RDRAND and RDSEED instructions, part of a random value generated by these instructions may be used in a later speculative execution on any core of the same physical CPU.
    Depending on how these instructions are used by applications, a local user or VM guest could use this to obtain sensitive information such as cryptographic keys from other users or VMs.

This vulnerability can be mitigated by a microcode update, either as part of system firmware (BIOS) or through the intel-microcode package in Debian’s non-free archive section. This kernel update only provides reporting of the vulnerability and the option to disable the mitigation if it is not needed.

  • CVE-2020-2732 Paulo Bonzini discovered that the KVM implementation for Intel processors did not properly handle instruction emulation for L2 guests when nested virtualization is enabled. This could allow an L2 guest to cause privilege escalation, denial of service, or information leaks in the L1 guest.

  • CVE-2020-8428 Al Viro discovered a potential use-after-free in the filesystem core (vfs). A local user could exploit this to cause a denial of service (crash) or possibly to obtain sensitive information from the kernel.

  • CVE-2020-8647, CVE-2020-8649 The Hulk Robot tool found a potential MMIO out-of-bounds access in the vgacon driver. A local user permitted to access a virtual terminal (/dev/tty1 etc.) on a system using the vgacon driver could use this to cause a denial of service (crash or memory corruption) or possibly for privilege escalation.

  • CVE-2020-8648 The syzbot tool found a race condition in the the virtual terminal driver, which could result in a use-after-free. A local user permitted to access a virtual terminal could use this to cause a denial of service (crash or memory corruption) or possibly for privilege escalation.

  • CVE-2020-9383 Jordy Zomer reported an incorrect range check in the floppy driver which could lead to a static out-of-bounds access. A local user permitted to access a floppy drive could use this to cause a denial of service (crash or memory corruption) or possibly for privilege escalation.

  • CVE-2020-10711 Matthew Sheets reported NULL pointer dereference issues in the SELinux subsystem while receiving CIPSO packet with null category. A remote attacker can take advantage of this flaw to cause a denial of service (crash). Note that this issue does not affect the binary packages distributed in Debian as CONFIG_NETLABEL is not enabled.

  • CVE-2020-10732 An information leak of kernel private memory to userspace was found in the kernel’s implementation of core dumping userspace processes.

  • CVE-2020-10751 Dmitry Vyukov reported that the SELinux subsystem did not properly handle validating multiple messages, which could allow a privileged attacker to bypass SELinux netlink restrictions.

  • CVE-2020-10757 Fan Yang reported a flaw in the way mremap handled DAX hugepages, allowing a local user to escalate their privileges

  • CVE-2020-10942 It was discovered that the vhost_net driver did not properly validate the type of sockets set as back-ends.
    A local user permitted to access /dev/vhost-net could use this to cause a stack corruption via crafted system calls, resulting in denial of service (crash) or possibly privilege escalation.

  • CVE-2020-11494 It was discovered that the slcan (serial line CAN) network driver did not fully initialise CAN headers for received packets, resulting in an information leak from the kernel to user-space or over the CAN network.

  • CVE-2020-11565 Entropy Moe reported that the shared memory filesystem (tmpfs) did not correctly handle an ‘mpol’ mount option specifying an empty node list, leading to a stack-based out-of-bounds write. If user namespaces are enabled, a local user could use this to cause a denial of service (crash) or possibly for privilege escalation.

  • CVE-2020-11608, CVE-2020-11609, CVE-2020-11668 It was discovered that the ov519, stv06xx, and xirlink_cit media drivers did not properly validate USB device descriptors. A physically present user with a specially constructed USB device could use this to cause a denial-of-service (crash) or possibly for privilege escalation.

  • CVE-2020-12114 Piotr Krysiuk discovered a race condition between the umount and pivot_root operations in the filesystem core (vfs). A local user with the CAP_SYS_ADMIN capability in any user namespace could use this to cause a denial of service (crash).

  • CVE-2020-12464 Kyungtae Kim reported a race condition in the USB core that can result in a use-after-free. It is not clear how this can be exploited, but it could result in a denial of service (crash or memory corruption) or privilege escalation.

  • CVE-2020-12652 Tom Hatskevich reported a bug in the mptfusion storage drivers. An ioctl handler fetched a parameter from user memory twice, creating a race condition which could result in incorrect locking of internal data structures.
    A local user permitted to access /dev/mptctl could use this to cause a denial of service (crash or memory corruption) or for privilege escalation.

  • CVE-2020-12653 It was discovered that the mwifiex WiFi driver did not sufficiently validate scan requests, resulting a potential heap buffer overflow. A local user with CAP_NET_ADMIN capability could use this to cause a denial of service (crash or memory corruption) or possibly for privilege escalation.

  • CVE-2020-12654 It was discovered that the mwifiex WiFi driver did not sufficiently validate WMM parameters received from an access point (AP), resulting a potential heap buffer overflow. A malicious AP could use this to cause a denial of service (crash or memory corruption) or possibly to execute code on a vulnerable system.

  • CVE-2020-12770 It was discovered that the sg (SCSI generic) driver did not correctly release internal resources in a particular error case. A local user permitted to access an sg device could possibly use this to cause a denial of service (resource exhaustion).

  • CVE-2020-13143 Kyungtae Kim reported a potential heap out-of-bounds write in the USB gadget subsystem. A local user permitted to write to the gadget configuration filesystem could use this to cause a denial of service (crash or memory corruption) or potentially for privilege escalation.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Debian Security Advisory DSA-4698. The text 
# itself is copyright (C) Software in the Public Interest, Inc.
#

include('compat.inc');

if (description)
{
  script_id(137340);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/07");

  script_cve_id(
    "CVE-2019-19319",
    "CVE-2019-19462",
    "CVE-2019-19768",
    "CVE-2019-20806",
    "CVE-2019-20811",
    "CVE-2019-2182",
    "CVE-2019-5108",
    "CVE-2020-0543",
    "CVE-2020-10711",
    "CVE-2020-10732",
    "CVE-2020-10751",
    "CVE-2020-10757",
    "CVE-2020-10942",
    "CVE-2020-11494",
    "CVE-2020-11565",
    "CVE-2020-11608",
    "CVE-2020-11609",
    "CVE-2020-11668",
    "CVE-2020-12114",
    "CVE-2020-12464",
    "CVE-2020-12652",
    "CVE-2020-12653",
    "CVE-2020-12654",
    "CVE-2020-12770",
    "CVE-2020-13143",
    "CVE-2020-2732",
    "CVE-2020-8428",
    "CVE-2020-8647",
    "CVE-2020-8648",
    "CVE-2020-8649",
    "CVE-2020-9383"
  );
  script_xref(name:"DSA", value:"4698");

  script_name(english:"Debian DSA-4698-1 : linux - security update");

  script_set_attribute(attribute:"synopsis", value:
"The remote Debian host is missing a security-related update.");
  script_set_attribute(attribute:"description", value:
"Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks.

  - CVE-2019-2182
    Hanjun Guo and Lei Li reported a race condition in the
    arm64 virtual memory management code, which could lead
    to an information disclosure, denial of service (crash),
    or possibly privilege escalation.

  - CVE-2019-5108
    Mitchell Frank of Cisco discovered that when the IEEE
    802.11 (WiFi) stack was used in AP mode with roaming, it
    would trigger roaming for a newly associated station
    before the station was authenticated. An attacker within
    range of the AP could use this to cause a denial of
    service, either by filling up a switching table or by
    redirecting traffic away from other stations.

  - CVE-2019-19319
    Jungyeon discovered that a crafted filesystem can cause
    the ext4 implementation to deallocate or reallocate
    journal blocks. A user permitted to mount filesystems
    could use this to cause a denial of service (crash), or
    possibly for privilege escalation.

  - CVE-2019-19462
    The syzbot tool found a missing error check in the
    'relay' library used to implement various files under
    debugfs. A local user permitted to access debugfs could
    use this to cause a denial of service (crash) or
    possibly for privilege escalation.

  - CVE-2019-19768
    Tristan Madani reported a race condition in the blktrace
    debug facility that could result in a use-after-free. A
    local user able to trigger removal of block devices
    could possibly use this to cause a denial of service
    (crash) or for privilege escalation.

  - CVE-2019-20806
    A potential NULL pointer dereference was discovered in
    the tw5864 media driver. The security impact of this is
    unclear.

  - CVE-2019-20811
    The Hulk Robot tool found a reference-counting bug in an
    error path in the network subsystem. The security impact
    of this is unclear.

  - CVE-2020-0543
    Researchers at VU Amsterdam discovered that on some
    Intel CPUs supporting the RDRAND and RDSEED
    instructions, part of a random value generated by these
    instructions may be used in a later speculative
    execution on any core of the same physical CPU.
    Depending on how these instructions are used by
    applications, a local user or VM guest could use this to
    obtain sensitive information such as cryptographic keys
    from other users or VMs.

  This vulnerability can be mitigated by a microcode update, either as
  part of system firmware (BIOS) or through the intel-microcode
  package in Debian's non-free archive section. This kernel update
  only provides reporting of the vulnerability and the option to
  disable the mitigation if it is not needed.

  - CVE-2020-2732
    Paulo Bonzini discovered that the KVM implementation for
    Intel processors did not properly handle instruction
    emulation for L2 guests when nested virtualization is
    enabled. This could allow an L2 guest to cause privilege
    escalation, denial of service, or information leaks in
    the L1 guest.

  - CVE-2020-8428
    Al Viro discovered a potential use-after-free in the
    filesystem core (vfs). A local user could exploit this
    to cause a denial of service (crash) or possibly to
    obtain sensitive information from the kernel.

  - CVE-2020-8647, CVE-2020-8649
    The Hulk Robot tool found a potential MMIO out-of-bounds
    access in the vgacon driver. A local user permitted to
    access a virtual terminal (/dev/tty1 etc.) on a system
    using the vgacon driver could use this to cause a denial
    of service (crash or memory corruption) or possibly for
    privilege escalation.

  - CVE-2020-8648
    The syzbot tool found a race condition in the the
    virtual terminal driver, which could result in a
    use-after-free. A local user permitted to access a
    virtual terminal could use this to cause a denial of
    service (crash or memory corruption) or possibly for
    privilege escalation.

  - CVE-2020-9383
    Jordy Zomer reported an incorrect range check in the
    floppy driver which could lead to a static out-of-bounds
    access. A local user permitted to access a floppy drive
    could use this to cause a denial of service (crash or
    memory corruption) or possibly for privilege escalation.

  - CVE-2020-10711
    Matthew Sheets reported NULL pointer dereference issues
    in the SELinux subsystem while receiving CIPSO packet
    with null category. A remote attacker can take advantage
    of this flaw to cause a denial of service (crash). Note
    that this issue does not affect the binary packages
    distributed in Debian as CONFIG_NETLABEL is not enabled.

  - CVE-2020-10732
    An information leak of kernel private memory to
    userspace was found in the kernel's implementation of
    core dumping userspace processes.

  - CVE-2020-10751
    Dmitry Vyukov reported that the SELinux subsystem did
    not properly handle validating multiple messages, which
    could allow a privileged attacker to bypass SELinux
    netlink restrictions.

  - CVE-2020-10757
    Fan Yang reported a flaw in the way mremap handled DAX
    hugepages, allowing a local user to escalate their
    privileges

  - CVE-2020-10942
    It was discovered that the vhost_net driver did not
    properly validate the type of sockets set as back-ends.
    A local user permitted to access /dev/vhost-net could
    use this to cause a stack corruption via crafted system
    calls, resulting in denial of service (crash) or
    possibly privilege escalation.

  - CVE-2020-11494
    It was discovered that the slcan (serial line CAN)
    network driver did not fully initialise CAN headers for
    received packets, resulting in an information leak from
    the kernel to user-space or over the CAN network.

  - CVE-2020-11565
    Entropy Moe reported that the shared memory filesystem
    (tmpfs) did not correctly handle an 'mpol' mount option
    specifying an empty node list, leading to a stack-based
    out-of-bounds write. If user namespaces are enabled, a
    local user could use this to cause a denial of service
    (crash) or possibly for privilege escalation.

  - CVE-2020-11608, CVE-2020-11609, CVE-2020-11668
    It was discovered that the ov519, stv06xx, and
    xirlink_cit media drivers did not properly validate USB
    device descriptors. A physically present user with a
    specially constructed USB device could use this to cause
    a denial-of-service (crash) or possibly for privilege
    escalation.

  - CVE-2020-12114
    Piotr Krysiuk discovered a race condition between the
    umount and pivot_root operations in the filesystem core
    (vfs). A local user with the CAP_SYS_ADMIN capability in
    any user namespace could use this to cause a denial of
    service (crash).

  - CVE-2020-12464
    Kyungtae Kim reported a race condition in the USB core
    that can result in a use-after-free. It is not clear how
    this can be exploited, but it could result in a denial
    of service (crash or memory corruption) or privilege
    escalation.

  - CVE-2020-12652
    Tom Hatskevich reported a bug in the mptfusion storage
    drivers. An ioctl handler fetched a parameter from user
    memory twice, creating a race condition which could
    result in incorrect locking of internal data structures.
    A local user permitted to access /dev/mptctl could use
    this to cause a denial of service (crash or memory
    corruption) or for privilege escalation.

  - CVE-2020-12653
    It was discovered that the mwifiex WiFi driver did not
    sufficiently validate scan requests, resulting a
    potential heap buffer overflow. A local user with
    CAP_NET_ADMIN capability could use this to cause a
    denial of service (crash or memory corruption) or
    possibly for privilege escalation.

  - CVE-2020-12654
    It was discovered that the mwifiex WiFi driver did not
    sufficiently validate WMM parameters received from an
    access point (AP), resulting a potential heap buffer
    overflow. A malicious AP could use this to cause a
    denial of service (crash or memory corruption) or
    possibly to execute code on a vulnerable system.

  - CVE-2020-12770
    It was discovered that the sg (SCSI generic) driver did
    not correctly release internal resources in a particular
    error case. A local user permitted to access an sg
    device could possibly use this to cause a denial of
    service (resource exhaustion).

  - CVE-2020-13143
    Kyungtae Kim reported a potential heap out-of-bounds
    write in the USB gadget subsystem. A local user
    permitted to write to the gadget configuration
    filesystem could use this to cause a denial of service
    (crash or memory corruption) or potentially for
    privilege escalation.");
  script_set_attribute(attribute:"see_also", value:"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952660");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-2182");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-5108");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-19319");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-19462");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-19768");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-20806");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2019-20811");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-0543");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-2732");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-8428");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-8647");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-8649");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-8648");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-9383");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-10711");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-10732");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-10751");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-10757");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-10942");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-11494");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-11565");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-11608");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-11609");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-11668");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-12114");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-12464");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-12652");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-12653");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-12654");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-12770");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2020-13143");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/linux");
  script_set_attribute(attribute:"see_also", value:"https://packages.debian.org/source/stretch/linux");
  script_set_attribute(attribute:"see_also", value:"https://www.debian.org/security/2020/dsa-4698");
  script_set_attribute(attribute:"solution", value:
"Upgrade the linux packages.

For the oldstable distribution (stretch), these problems have been
fixed in version 4.9.210-1+deb9u1. This version also fixes some
related bugs that do not have their own CVE IDs, and a regression in
the macvlan driver introduced in the previous point release (bug
#952660).");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-12464");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-12653");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/09/06");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/06/09");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/06/11");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:linux");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Debian Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("debian_package.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;
if (deb_check(release:"9.0", prefix:"hyperv-daemons", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"libcpupower-dev", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"libcpupower1", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"libusbip-dev", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-compiler-gcc-6-arm", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-compiler-gcc-6-s390", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-compiler-gcc-6-x86", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-cpupower", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-doc-4.9", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-4kc-malta", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-5kc-malta", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-686", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-686-pae", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-amd64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-arm64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-armel", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-armhf", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-i386", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-mips", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-mips64el", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-mipsel", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-ppc64el", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-all-s390x", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-amd64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-arm64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-armmp", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-armmp-lpae", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-common", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-common-rt", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-loongson-3", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-marvell", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-octeon", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-powerpc64le", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-rt-686-pae", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-rt-amd64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-headers-4.9.0-9-s390x", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-4kc-malta", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-4kc-malta-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-5kc-malta", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-5kc-malta-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-686", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-686-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-686-pae", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-686-pae-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-amd64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-amd64-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-arm64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-arm64-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-armmp", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-armmp-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-armmp-lpae", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-armmp-lpae-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-loongson-3", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-loongson-3-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-marvell", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-marvell-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-octeon", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-octeon-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-powerpc64le", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-powerpc64le-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-rt-686-pae", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-rt-686-pae-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-rt-amd64", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-rt-amd64-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-s390x", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-image-4.9.0-9-s390x-dbg", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-kbuild-4.9", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-libc-dev", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-manual-4.9", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-perf-4.9", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-source-4.9", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"linux-support-4.9.0-9", reference:"4.9.210-1+deb9u1")) flag++;
if (deb_check(release:"9.0", prefix:"usbip", reference:"4.9.210-1+deb9u1")) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
  else security_hole(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");

References

Related

osv 12
debian 9
nessus 73
openvas 53
slackware 1
ubuntu 16
cloudfoundry 2
suse 2
mageia 6
oraclelinux 3
amazon 5
photon 7
f5 1
redhat 7
ibm 1
archlinux 1
osv
osv
linux - security update
2020-06-09 00:00:00
linux-4.9 - security update
2020-06-09 00:00:00
linux - security update
2020-06-09 00:00:00
debian
debian
[SECURITY] [DLA 2242-1] linux-4.9 security update
2020-06-10 10:48:38
[SECURITY] [DSA 4698-1] linux security update
2020-06-09 19:44:16
[SECURITY] [DSA 4698-1] linux security update
2020-06-09 19:44:16
nessus
nessus
Debian DLA-2242-1 : linux-4.9 security update
2020-06-11 00:00:00
Photon OS 1.0: Linux PHSA-2020-1.0-0290
2020-04-29 00:00:00
Slackware 14.2 : Slackware 14.2 kernel (SSA:2020-163-01)
2020-06-12 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2242-1)
2020-06-11 00:00:00
Debian: Security Advisory (DSA-4698-1)
2020-06-11 00:00:00
Debian: Security Advisory (DSA-4699-1)
2020-06-11 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2020-06-11 21:36:19
ubuntu
ubuntu
Kernel Live Patch Security Notice
2020-06-09 00:00:00
Linux kernel vulnerabilities
2020-05-19 00:00:00
Linux kernel vulnerabilities
2020-04-28 00:00:00
cloudfoundry
cloudfoundry
USN-4345-1: Linux kernel vulnerabilities | Cloud Foundry
2020-05-14 00:00:00
USN-4390-1: Linux kernel vulnerabilities | Cloud Foundry
2020-06-22 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2020-06-13 00:00:00
Security update for the Linux Kernel (important)
2020-03-27 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-04-25 23:55:48
Updated kernel-linus packages fix security vulnerabilities
2020-04-25 23:55:48
Updated kernel packages fix security vulnerabilities
2020-03-14 02:19:55
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-05-18 00:00:00
Unbreakable Enterprise kernel security update
2020-04-27 00:00:00
Unbreakable Enterprise kernel security update
2020-07-14 00:00:00
amazon
amazon
Important: kernel
2020-06-01 12:24:00
Important: kernel
2020-06-01 22:37:00
Important: kernel
2020-03-23 16:25:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0230
2020-04-15 00:00:00
Important Photon OS Security Update - PHSA-2020-0221
2020-03-17 00:00:00
Important Photon OS Security Update - PHSA-2020-0230
2020-04-13 00:00:00
f5
f5
K03310902 : Multiple Linux vulnerabilities CVE-2020-8647,CVE-2020-8648, CVE-2020-8649
2020-03-26 00:00:00
redhat
redhat
(RHSA-2020:3226) Important: kernel security and bug fix update
2020-07-29 19:50:14
(RHSA-2020:2832) Important: kernel security and bug fix update
2020-07-07 08:15:30
(RHSA-2020:3432) Important: kernel security update
2020-08-12 11:18:05
ibm
ibm
Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management
2020-09-23 12:26:54
archlinux
archlinux
[ASA-202003-6] linux: multiple issues
2020-03-08 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.01

Percentile

83.7%

JSON
Related for DEBIAN_DSA-4698.NASL
osv12debian9nessus73openvas53slackware1ubuntu16cloudfoundry2suse2mageia6oraclelinux3amazon5photon7f51redhat7ibm1archlinux1