Lucene search
Copyright (C) 2022 Greenbone AGOPENVAS:1361412562310845272HistoryMar 09, 2022 - 12:00 a.m.
Ubuntu: Security Advisory (USN-5319-1)
2022-03-0900:00:00
Copyright (C) 2022 Greenbone AG
plugins.openvas.org
1
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0005 Low
EPSS
Percentile
16.6%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.845272");
script_cve_id("CVE-2022-0001", "CVE-2022-0002");
script_tag(name:"creation_date", value:"2022-03-09 02:00:24 +0000 (Wed, 09 Mar 2022)");
script_version("2024-02-02T05:06:10+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:10 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"2.1");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:P/I:N/A:N");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2022-03-18 20:13:16 +0000 (Fri, 18 Mar 2022)");
script_name("Ubuntu: Security Advisory (USN-5319-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone AG");
script_family("Ubuntu Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/ubuntu_linux", "ssh/login/packages", re:"ssh/login/release=UBUNTU(14\.04\ LTS|16\.04\ LTS|18\.04\ LTS)");
script_xref(name:"Advisory-ID", value:"USN-5319-1");
script_xref(name:"URL", value:"https://ubuntu.com/security/notices/USN-5319-1");
script_xref(name:"URL", value:"https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BHI");
script_tag(name:"summary", value:"The remote host is missing an update for the 'linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon' package(s) announced via the USN-5319-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano
Giuffrida discovered that hardware mitigations added by Intel to their
processors to address Spectre-BTI were insufficient. A local attacker could
potentially use this to expose sensitive information.");
script_tag(name:"affected", value:"'linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "UBUNTU14.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1133-azure", ver:"4.15.0-1133.146~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1101-aws", ver:"4.4.0-1101.106", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-221-generic", ver:"4.4.0-221.254~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-221-lowlatency", ver:"4.4.0-221.254~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-aws", ver:"4.4.0.1101.99", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-azure", ver:"4.15.0.1133.106", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lts-xenial", ver:"4.4.0.221.192", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency-lts-xenial", ver:"4.4.0.221.192", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual-lts-xenial", ver:"4.4.0.221.192", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU16.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1089-oracle", ver:"4.15.0-1089.98~16.04.1", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1118-gcp", ver:"4.15.0-1118.132~16.04.1", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1123-aws-hwe", ver:"4.15.0-1123.132~16.04.1", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1133-azure", ver:"4.15.0-1133.146~16.04.1", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-171-generic", ver:"4.15.0-171.180~16.04.1", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-171-lowlatency", ver:"4.15.0-171.180~16.04.1", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1102-kvm", ver:"4.4.0-1102.111", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1137-aws", ver:"4.4.0-1137.151", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-221-generic", ver:"4.4.0-221.254", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-221-lowlatency", ver:"4.4.0-221.254", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-aws", ver:"4.4.0.1137.142", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-aws-hwe", ver:"4.15.0.1123.113", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-azure", ver:"4.15.0.1133.124", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gcp", ver:"4.15.0.1118.119", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"4.4.0.221.228", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-hwe-16.04", ver:"4.15.0.171.163", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gke", ver:"4.15.0.1118.119", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-kvm", ver:"4.4.0.1102.100", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"4.4.0.221.228", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency-hwe-16.04", ver:"4.15.0.171.163", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oem", ver:"4.15.0.171.163", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oracle", ver:"4.15.0.1089.77", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual", ver:"4.4.0.221.228", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual-hwe-16.04", ver:"4.15.0.171.163", rls:"UBUNTU16.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU18.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1037-dell300x", ver:"4.15.0-1037.42", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1089-oracle", ver:"4.15.0-1089.98", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1105-raspi2", ver:"4.15.0-1105.112", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1109-kvm", ver:"4.15.0-1109.112", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1118-gcp", ver:"4.15.0-1118.132", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1122-snapdragon", ver:"4.15.0-1122.131", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1123-aws", ver:"4.15.0-1123.132", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1133-azure", ver:"4.15.0-1133.146", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-171-generic", ver:"4.15.0-171.180", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-171-generic-lpae", ver:"4.15.0-171.180", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-171-lowlatency", ver:"4.15.0-171.180", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-aws-lts-18.04", ver:"4.15.0.1123.126", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-azure-lts-18.04", ver:"4.15.0.1133.106", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-dell300x", ver:"4.15.0.1037.39", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-gcp-lts-18.04", ver:"4.15.0.1118.137", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"4.15.0.171.160", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae", ver:"4.15.0.171.160", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-kvm", ver:"4.15.0.1109.105", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"4.15.0.171.160", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-oracle-lts-18.04", ver:"4.15.0.1089.99", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-raspi2", ver:"4.15.0.1105.103", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-snapdragon", ver:"4.15.0.1122.125", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual", ver:"4.15.0.171.160", rls:"UBUNTU18.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
intel
intel
Intel® Processor Advisory
2022-03-08 00:00:00
cloudfoundry
cloudfoundry
USN-5319-1: Linux kernel vulnerabilities | Cloud Foundry
2022-04-21 00:00:00
USN-5318-1: Linux kernel vulnerabilities | Cloud Foundry
2022-03-11 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-03-09 00:00:00
Linux kernel vulnerabilities
2022-03-09 00:00:00
Linux kernel vulnerabilities
2022-03-09 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5319-1)
2022-03-09 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2022:0764-1)
2022-03-22 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2022:0763-1)
2022-03-22 00:00:00
openvas
openvas
openSUSE: Security Advisory for xen (openSUSE-SU-2022:0940-1)
2022-03-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0940-1)
2022-03-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0939-1)
2022-03-24 00:00:00
suse
suse
Security update for xen (important)
2022-03-23 00:00:00
Security update for the Linux Kernel (important)
2022-03-08 00:00:00
Security update for the Linux Kernel (important)
2022-03-08 00:00:00
redhatcve
redhatcve
CVE-2022-0002
2022-03-09 10:13:18
CVE-2022-0001
2022-03-09 10:13:18
prion
prion
Information disclosure
2022-03-11 18:15:00
Information disclosure
2022-03-11 18:15:00
xen
xen
Multiple speculative security issues
2022-03-08 18:12:00
debiancve
debiancve
CVE-2022-0002
2022-03-11 18:15:00
CVE-2022-0001
2022-03-11 18:15:00
cve
cve
CVE-2022-0002
2022-03-11 18:15:00
CVE-2022-0001
2022-03-11 18:15:00
ubuntucve
ubuntucve
CVE-2022-0002
2022-03-08 00:00:00
CVE-2022-0001
2022-03-08 00:00:00
mscve
mscve
Intel: CVE-2022-0001 Branch History Injection
2024-04-09 07:00:00
ibm
ibm
debian
debian
[SECURITY] [DSA 5095-1] linux security update
2022-03-09 15:30:29
[SECURITY] [DLA 2940-1] linux security update
2022-03-09 12:40:13
[SECURITY] [DLA 2941-1] linux-4.19 security update
2022-03-09 12:40:55
cert
cert
Linux kernel on Intel systems is susceptible to Spectre v2 attacks
2024-04-09 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2022-03-14 19:51:52
Updated kernel packages fix security vulnerabilities
2022-03-14 19:51:52
amazon
amazon
Important: kernel
2022-03-07 23:19:00
Important: kernel
2022-03-07 23:32:00
ics
ics
Mitsubishi Electric Factory Automation Products
2023-05-02 12:00:00
Siemens SCALANCE, RUGGEDCOM Third-Party
2023-03-16 12:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-05-09 21:58:04
rocky
rocky
kernel-rt security and bug fix update
2022-05-10 06:42:36
kernel security, bug fix, and enhancement update
2022-05-10 08:11:36
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2022-05-17 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-05-10 08:11:36
redhat
redhat
photon
photon
Critical Photon OS Security Update - PHSA-2022-4.0-0183
2022-05-14 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0393
2022-05-14 00:00:00
mskb
mskb
April 9, 2024—KB5036950 (Security-only update)
2024-04-09 07:00:00
April 9, 2024—KB5036932 (Monthly Rollup)
2024-04-09 07:00:00
April 9, 2024—KB5036922 (Security-only update)
2024-04-09 07:00:00
kaspersky
kaspersky
KLA65512 Multiple vulnerabilities in Microsoft Products (ESU)
2024-04-09 00:00:00
KLA65511 Multiple vulnerabilities in Microsoft Windows
2024-04-09 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
7.5 High
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0005 Low
EPSS
Percentile
16.6%
Related for OPENVAS:1361412562310845272