Lucene search
Copyright (C) 2017 Greenbone AGOPENVAS:1361412562310843127HistoryApr 06, 2017 - 12:00 a.m.
Ubuntu: Security Advisory (USN-3256-1)
2017-04-0600:00:00
Copyright (C) 2017 Greenbone AG
plugins.openvas.org
16
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
36.9%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.843127");
script_cve_id("CVE-2017-7308");
script_tag(name:"creation_date", value:"2017-04-06 04:33:10 +0000 (Thu, 06 Apr 2017)");
script_version("2024-02-02T05:06:06+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:06 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"7.2");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2017-03-31 18:12:52 +0000 (Fri, 31 Mar 2017)");
script_name("Ubuntu: Security Advisory (USN-3256-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2017 Greenbone AG");
script_family("Ubuntu Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/ubuntu_linux", "ssh/login/packages", re:"ssh/login/release=UBUNTU(12\.04\ LTS|14\.04\ LTS|16\.04\ LTS|16\.10)");
script_xref(name:"Advisory-ID", value:"USN-3256-1");
script_xref(name:"URL", value:"https://ubuntu.com/security/notices/USN-3256-1");
script_tag(name:"summary", value:"The remote host is missing an update for the 'linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon, linux-ti-omap4' package(s) announced via the USN-3256-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Andrey Konovalov discovered that the AF_PACKET implementation in the Linux
kernel did not properly validate certain block-size data. A local attacker
could use this to cause a denial of service (system crash).");
script_tag(name:"affected", value:"'linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon, linux-ti-omap4' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 16.10.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "UBUNTU12.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-generic", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-generic-pae", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-highbank", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-omap", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-powerpc-smp", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-powerpc64-smp", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-126-virtual", ver:"3.2.0-126.169", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-1504-omap4", ver:"3.2.0-1504.131", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-pae", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-highbank", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-omap", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-omap4", ver:"3.2.0.1504.99", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual", ver:"3.2.0.126.141", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU14.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-generic", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-generic-lpae", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-lowlatency", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-powerpc-e500", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-powerpc-e500mc", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-powerpc-smp", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-116-powerpc64-smp", ver:"3.13.0-116.163", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500mc", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp", ver:"3.13.0.116.126", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU16.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1010-gke", ver:"4.4.0-1010.10", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1013-aws", ver:"4.4.0-1013.22", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1052-raspi2", ver:"4.4.0-1052.59", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1055-snapdragon", ver:"4.4.0-1055.59", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-72-generic", ver:"4.4.0-72.93", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-72-generic-lpae", ver:"4.4.0-72.93", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-72-lowlatency", ver:"4.4.0-72.93", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-72-powerpc-e500mc", ver:"4.4.0-72.93", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-72-powerpc-smp", ver:"4.4.0-72.93", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-72-powerpc64-smp", ver:"4.4.0-72.93", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-aws", ver:"4.4.0.1013.16", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gke", ver:"4.4.0.1010.12", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500mc", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp-lts-utopic", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp-lts-vivid", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp-lts-wily", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp-lts-xenial", ver:"4.4.0.72.78", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-raspi2", ver:"4.4.0.1052.53", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-snapdragon", ver:"4.4.0.1055.48", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU16.10") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-1033-raspi2", ver:"4.8.0-1033.36", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-46-generic", ver:"4.8.0-46.49", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-46-generic-lpae", ver:"4.8.0-46.49", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-46-lowlatency", ver:"4.8.0-46.49", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-46-powerpc-e500mc", ver:"4.8.0-46.49", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-46-powerpc-smp", ver:"4.8.0-46.49", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.8.0-46-powerpc64-emb", ver:"4.8.0-46.49", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"4.8.0.46.58", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae", ver:"4.8.0.46.58", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"4.8.0.46.58", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500mc", ver:"4.8.0.46.58", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp", ver:"4.8.0.46.58", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp", ver:"4.8.0.46.58", rls:"UBUNTU16.10"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-raspi2", ver:"4.8.0.1033.37", rls:"UBUNTU16.10"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2017-06-01 00:00:00
Unbreakable Enterprise kernel security update
2017-06-01 00:00:00
kernel security, bug fix, and enhancement update
2017-05-26 00:00:00
hackerone
hackerone
redhatcve
redhatcve
CVE-2017-7308
2019-10-25 00:24:39
CVE-2021-22600
2022-01-28 20:58:25
metasploit
metasploit
AF_PACKET packet_set_ring Privilege Escalation
2018-04-28 01:40:17
exploitpack
exploitpack
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:1287-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1285-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1291-1)
2021-04-19 00:00:00
suse
suse
Security update for Linux Kernel Live Patch 16 for SLE 12 (important)
2017-05-15 21:24:09
Security update for Linux Kernel Live Patch 15 for SLE 12 (important)
2017-05-15 21:32:37
Security update for Linux Kernel Live Patch 13 for SLE 12 (important)
2017-05-15 21:31:58
nessus
nessus
SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1291-1)
2017-05-16 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1287-1)
2017-05-16 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1278-1)
2017-05-16 00:00:00
zdt
zdt
ubuntucve
ubuntucve
CVE-2017-7308
2017-03-29 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2017-04-05 00:00:00
Linux kernel (HWE) vulnerability
2017-04-05 00:00:00
cve
cve
CVE-2017-7308
2017-03-29 20:59:00
debiancve
debiancve
CVE-2017-7308
2017-03-29 20:59:00
cloudfoundry
cloudfoundry
USN-3256-2: Linux kernel (HWE) vulnerability | Cloud Foundry
2017-04-12 00:00:00
seebug
seebug
Linux kernel Local Denial of Service Vulnerability (CVE-2017-7308 )
2017-05-11 00:00:00
prion
prion
Integer overflow
2017-03-29 20:59:00
f5
f5
K82224417 : Linux kernel vulnerability CVE-2017-7308
2017-05-05 00:00:00
packetstorm
packetstorm
AF_PACKET packet_set_ring Privilege Escalation
2018-05-17 00:00:00
veracode
veracode
Out-Of-Bounds Write
2019-05-02 06:11:33
virtuozzo
virtuozzo
exploitdb
exploitdb
threatpost
threatpost
RSAC 2019: Container Escape Hack Targets Vulnerable Linux Kernel
2019-03-04 13:30:17
photon
photon
Important Photon OS Security Update - PHSA-2017-0041
2017-05-11 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2017-0011
2017-04-14 00:00:00
Critical Photon OS Security Update - PHSA-2018-0031
2018-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: kernel-4.10.10-200.fc25
2017-04-17 20:54:22
[SECURITY] Fedora 24 Update: kernel-4.10.10-100.fc24
2017-04-17 20:54:45
googleprojectzero
googleprojectzero
Exploiting the Linux kernel via packet sockets
2017-05-10 00:00:00
redhat
redhat
(RHSA-2017:1297) Important: kernel-rt security and bug fix update
2017-05-25 13:15:44
(RHSA-2017:1298) Important: kernel-rt security and bug fix update
2017-05-25 13:21:34
(RHSA-2017:1308) Important: kernel security, bug fix, and enhancement update
2017-05-25 13:27:24
centos
centos
kernel, perf, python security update
2017-05-26 02:33:51
kernel, perf, python security update
2018-06-21 11:55:42
amazon
amazon
Important: kernel
2017-05-10 17:06:00
ibm
ibm
mageia
mageia
Updated kernel packages fixes security vulnerabilities
2017-05-10 23:47:44
Updated kernel-tmb packages fixes security vulnerabilities
2017-05-26 09:54:58
Updated kernel-linus packages fixes security vulnerabilities
2017-05-26 09:54:58
osv
osv
linux - security update
2017-04-28 00:00:00
kitploit
kitploit
debian
debian
[SECURITY] [DLA 922-1] linux security update
2017-04-28 12:39:18
androidsecurity
androidsecurity
Android Security Bulletin—July 2017
2017-07-05 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.1 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
36.9%
Related for OPENVAS:1361412562310843127