Lucene search
+L

Fedora Update for kernel-headers FEDORA-2019-f40bd7826f

🗓️ 10 Jun 2019 00:00:00Reported by Copyright (C) 2019 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 50 Views

Fedora Update for kernel-headers FEDORA-2019-f40bd7826f advisory. Missing update for 'kernel-headers' package(s) on Fedora 30

Related
Refs
Code
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
13 Aug 202122:15
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za
25 Jul 201915:25
ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability
7 Oct 202016:13
ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in kernel.
7 Jul 202210:52
ibm
androidsecurity
Android Security Bulletins
Pixel Update Bulletin—March 2020Stay organized with collectionsSave and categorize content based on your preferences.
2 Mar 202000:00
androidsecurity
avleonov
Information Security Automation
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
30 Dec 202218:03
avleonov
bdu_fstec
BDU FSTEC
The vulnerability of the mwifiex_update_bss_desc_with_ie function in Linux kernel allows a hacker to escalate their privileges, cause service failures, or execute arbitrary code.
20 Aug 201900:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the drm_load_edid_firmware function (drivers/gpu/drm/drm_edid_load.c) in the Linux kernel allows a hacker to trigger a service failure.
24 Dec 202100:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the ip_ra_control function in the net/ipv4/ip_sockglue.c component of the Linux operating system, related to pointer dereferencing errors, allows a hacker to trigger a service failure.
7 Nov 202400:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the `con_insert_unipair` function in the Linux kernel’s `drivers/tty/vt/consolemap.c` file allows a malicious actor to trigger a service failure by improperly releasing memory before deleting the last reference.
7 Nov 202400:00
bdu_fstec
Rows per page
# Copyright (C) 2019 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.876477");
  script_version("2021-09-01T14:01:32+0000");
  script_cve_id("CVE-2019-12454", "CVE-2019-12455", "CVE-2019-12379", "CVE-2019-12382", "CVE-2019-12381", "CVE-2019-12380", "CVE-2019-3846", "CVE-2019-12378");
  script_tag(name:"cvss_base", value:"8.3");
  script_tag(name:"cvss_base_vector", value:"AV:A/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2021-09-01 14:01:32 +0000 (Wed, 01 Sep 2021)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2020-10-15 14:37:00 +0000 (Thu, 15 Oct 2020)");
  script_tag(name:"creation_date", value:"2019-06-10 02:09:55 +0000 (Mon, 10 Jun 2019)");
  script_name("Fedora Update for kernel-headers FEDORA-2019-f40bd7826f");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2019 Greenbone Networks GmbH");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC30");

  script_xref(name:"FEDORA", value:"2019-f40bd7826f");
  script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'kernel-headers'
  package(s) announced via the FEDORA-2019-f40bd7826f advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Kernel-headers includes the C header files that specify the interface
between the Linux kernel and userspace libraries and programs.  The
header files define structures and constants that are needed for
building most standard programs and are also needed for rebuilding the
glibc package.");

  script_tag(name:"affected", value:"'kernel-headers' package(s) on Fedora 30.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "FC30") {

  if(!isnull(res = isrpmvuln(pkg:"kernel-headers", rpm:"kernel-headers~5.1.7~300.fc30", rls:"FC30"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if (__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Sep 2021 00:00Current
8.4High risk
Vulners AI Score8.4
CVSS 28.3
CVSS 37.8 - 8
CVSS 3.18.8
EPSS0.05649
SSVC
50