Lucene search
Copyright (C) 2023 Greenbone AGOPENVAS:1361412562311122014118HistoryMar 08, 2023 - 12:00 a.m.
Debian: Security Advisory (DLA-118-1)
2023-03-0800:00:00
Copyright (C) 2023 Greenbone AG
plugins.openvas.org
1
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.733 High
EPSS
Percentile
98.1%
The remote host is missing an update for the Debian
# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.1.2.2014.118");
script_cve_id("CVE-2014-3185", "CVE-2014-3687", "CVE-2014-3688", "CVE-2014-6410", "CVE-2014-7841", "CVE-2014-8709", "CVE-2014-8884");
script_tag(name:"creation_date", value:"2023-03-08 12:56:44 +0000 (Wed, 08 Mar 2023)");
script_version("2024-02-02T05:06:10+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:10 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"7.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2014-11-10 14:26:04 +0000 (Mon, 10 Nov 2014)");
script_name("Debian: Security Advisory (DLA-118-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2023 Greenbone AG");
script_family("Debian Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/debian_linux", "ssh/login/packages", re:"ssh/login/release=DEB6");
script_xref(name:"Advisory-ID", value:"DLA-118-1");
script_xref(name:"URL", value:"https://www.debian.org/lts/security/2014/DLA-118-1");
script_xref(name:"URL", value:"http://lkml.org/lkml/2014/12/13/81");
script_tag(name:"summary", value:"The remote host is missing an update for the Debian 'linux-2.6' package(s) announced via the DLA-118-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Non-maintainer upload by the Squeeze LTS and Kernel Teams.
New upstream stable release 2.6.32.65, see [link moved to references] for more information.
The stable release 2.6.32.65 includes the following new commits compared to the previous 2.6.32-48squeeze9 package:
USB: whiteheat: Added bounds checking for bulk command response (CVE-2014-3185)
net: sctp: fix panic on duplicate ASCONF chunks (CVE-2014-3687)
net: sctp: fix remote memory pressure from excessive queueing (CVE-2014-3688)
udf: Avoid infinite loop when processing indirect ICBs (CVE-2014-6410)
net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (CVE-2014-7841)
mac80211: fix fragmentation code, particularly for encryption (CVE-2014-8709)
ttusb-dec: buffer overflow in ioctl (CVE-2014-8884)
We recommend that you upgrade your linux-2.6 packages.
We apologize for a minor cosmetic glitch:
The following commits were already included in 2.6.32-48squeeze9 despite claims in debian/changelog they were only fixed in 2.6.32-48squeez10:
vlan: Don't propagate flag changes on down interfaces.
sctp: Fix double-free introduced by bad backport in 2.6.32.62
md/raid6: Fix misapplied backport in 2.6.32.64
block: add missing blk_queue_dead() checks
block: Fix blk_execute_rq_nowait() dead queue handling
proc connector: Delete spurious memset in proc_exit_connector()");
script_tag(name:"affected", value:"'linux-2.6' package(s) on Debian 6.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "DEB6") {
if(!isnull(res = isdpkgvuln(pkg:"firmware-linux-free", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-base", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-doc-2.6.32", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-486", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-686-bigmem", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-all", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-all-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-all-i386", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-common", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-common-openvz", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-common-vserver", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-common-xen", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-openvz-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-openvz-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-vserver-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-vserver-686-bigmem", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-vserver-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-xen-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-headers-2.6.32-5-xen-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-486", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-686-bigmem", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-686-bigmem-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-amd64-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-openvz-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-openvz-686-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-openvz-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-openvz-amd64-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-vserver-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-vserver-686-bigmem", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-vserver-686-bigmem-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-vserver-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-vserver-amd64-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-xen-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-xen-686-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-xen-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-2.6.32-5-xen-amd64-dbg", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-libc-dev", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-manual-2.6.32", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-patch-debian-2.6.32", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-source-2.6.32", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-support-2.6.32-5", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-tools-2.6.32", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"xen-linux-system-2.6.32-5-xen-686", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"xen-linux-system-2.6.32-5-xen-amd64", ver:"2.6.32-48squeeze10", rls:"DEB6"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
nessus
nessus
Debian DLA-118-1 : linux-2.6 security update
2015-03-26 00:00:00
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2442-1)
2014-12-15 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2441-1)
2014-12-15 00:00:00
debian
debian
[SECURITY] [DLA 118-1] linux-2.6 security update
2014-12-21 17:45:48
[SECURITY] [DSA 3093-1] linux security update
2014-12-08 21:09:15
[SECURITY] [DSA 3093-1] linux security update
2014-12-08 21:09:15
osv
osv
linux-2.6 - security update
2014-12-21 00:00:00
linux - security update
2014-12-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2442-1)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-2441-1)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-2374-1)
2014-10-10 00:00:00
securityvulns
securityvulns
[USN-2441-1] Linux kernel vulnerabilities
2014-12-21 00:00:00
Linux kernel multiple security vulnerabilities
2014-12-21 00:00:00
[SECURITY] [DSA 3093-1] linux security update
2014-12-11 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2014-12-12 00:00:00
Linux kernel (EC2) vulnerabilities
2014-12-12 00:00:00
Linux kernel (EC2) vulnerabilities
2014-10-09 00:00:00
redhat
redhat
(RHSA-2015:0115) Important: kernel security update
2015-02-03 00:00:00
(RHSA-2015:0043) Important: kernel security and bug fix update
2015-01-13 00:00:00
(RHSA-2014:1997) Important: kernel security and bug fix update
2014-12-16 00:00:00
f5
f5
SOL16016 - Linux kernel SCTP vulnerability CVE-2014-7841
2015-01-21 00:00:00
K16558 : Linux kernel vulnerability CVE-2014-8884
2015-05-08 00:00:00
SOL16558 - Linux kernel vulnerability CVE-2014-8884
2015-05-08 00:00:00
centos
centos
kernel, perf, python security update
2014-12-17 12:13:22
kernel, perf, python security update
2015-01-28 22:43:51
kernel, perf, python security update
2014-12-10 12:48:13
suse
suse
Security update for Linux Kernel (important)
2014-12-21 13:12:48
Security update for Linux kernel (important)
2015-04-02 02:06:32
Security update for the Linux Kernel (important)
2014-12-21 13:04:41
prion
prion
Stack overflow
2014-11-30 01:59:00
Code injection
2014-11-30 01:59:00
Null pointer dereference
2014-11-30 01:59:00
cve
cve
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2015-01-29 00:00:00
Unbreakable Enterprise kernel security update
2014-12-11 00:00:00
Unbreakable Enterprise kernel security and bugfix update
2015-01-29 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:11:55
Arbitrary Code Execution
2019-05-02 05:11:54
cbl_mariner
cbl_mariner
CVE-2014-3185 affecting package kernel for versions less than 6.6.22.1-2
2024-04-02 21:08:16
CVE-2014-3185 affecting package kernel for versions less than 5.15.153.1-1
2024-04-09 20:48:36
fedora
fedora
[SECURITY] Fedora 21 Update: kernel-3.16.3-300.fc21
2014-09-23 04:43:38
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.733 High
EPSS
Percentile
98.1%
Related for OPENVAS:1361412562311122014118