Lucene search
Copyright (C) 2022 Greenbone AGOPENVAS:136141256231112201941352HistoryAug 26, 2022 - 12:00 a.m.
Ubuntu: Security Advisory (USN-4135-2)
2022-08-2600:00:00
Copyright (C) 2022 Greenbone AG
plugins.openvas.org
6
ubuntu
security advisory
usn-4135-2
linux
linux-aws
linux-azure
linux-lts-trusty
linux-lts-xenial
cve-2019-14835
cve-2019-15030
cve-2019-15031
vulnerabilities
buffer overflow
denial of service
arbitrary code
powerpc architectures
sensitive information
ubuntu 12.04
ubuntu 14.04
install
updated package
vendorfix.
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
29.4%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.1.12.2019.4135.2");
script_cve_id("CVE-2019-14835", "CVE-2019-15030", "CVE-2019-15031");
script_tag(name:"creation_date", value:"2022-08-26 07:43:23 +0000 (Fri, 26 Aug 2022)");
script_version("2024-02-02T05:06:10+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:10 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"7.2");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2019-09-18 19:06:21 +0000 (Wed, 18 Sep 2019)");
script_name("Ubuntu: Security Advisory (USN-4135-2)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2022 Greenbone AG");
script_family("Ubuntu Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/ubuntu_linux", "ssh/login/packages", re:"ssh/login/release=UBUNTU(12\.04\ LTS|14\.04\ LTS)");
script_xref(name:"Advisory-ID", value:"USN-4135-2");
script_xref(name:"URL", value:"https://ubuntu.com/security/notices/USN-4135-2");
script_tag(name:"summary", value:"The remote host is missing an update for the 'linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial' package(s) announced via the USN-4135-2 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Peter Pi discovered a buffer overflow in the virtio network backend
(vhost_net) implementation in the Linux kernel. An attacker in a guest may
be able to use this to cause a denial of service (host OS crash) or
possibly execute arbitrary code in the host OS. (CVE-2019-14835)
It was discovered that the Linux kernel on PowerPC architectures did not
properly handle Facility Unavailable exceptions in some situations. A local
attacker could use this to expose sensitive information. (CVE-2019-15030)
It was discovered that the Linux kernel on PowerPC architectures did not
properly handle exceptions on interrupts in some situations. A local
attacker could use this to expose sensitive information. (CVE-2019-15031)");
script_tag(name:"affected", value:"'linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial' package(s) on Ubuntu 12.04, Ubuntu 14.04.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "UBUNTU12.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-generic", ver:"3.13.0-173.224~12.04.1", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-generic-lpae", ver:"3.13.0-173.224~12.04.1", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-lowlatency", ver:"3.13.0-173.224~12.04.1", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-generic", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-generic-pae", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-highbank", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-omap", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-powerpc-smp", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-powerpc64-smp", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.2.0-143-virtual", ver:"3.2.0-143.190", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae-lts-trusty", ver:"3.13.0.173.161", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lts-trusty", ver:"3.13.0.173.161", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-pae", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-highbank", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-omap", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-server", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual", ver:"3.2.0.143.158", rls:"UBUNTU12.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "UBUNTU14.04 LTS") {
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-generic", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-generic-lpae", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-lowlatency", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-powerpc-e500", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-powerpc-e500mc", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-powerpc-smp", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-powerpc64-emb", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-3.13.0-173-powerpc64-smp", ver:"3.13.0-173.224", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.15.0-1059-azure", ver:"4.15.0-1059.64~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-1054-aws", ver:"4.4.0-1054.58", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-generic", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-generic-lpae", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-lowlatency", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-powerpc-e500mc", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-powerpc-smp", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-powerpc64-emb", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-4.4.0-164-powerpc64-smp", ver:"4.4.0-164.192~14.04.1", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-aws", ver:"4.4.0.1054.55", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-azure", ver:"4.15.0.1059.45", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lpae-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-generic-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-lowlatency-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500mc", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-e500mc-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc-smp-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-emb", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-emb-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-powerpc64-smp-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-server", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual", ver:"3.13.0.173.184", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"linux-image-virtual-lts-xenial", ver:"4.4.0.164.143", rls:"UBUNTU14.04 LTS"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
ubuntu
ubuntu
Linux kernel vulnerabilities
2019-09-18 00:00:00
Linux kernel vulnerabilities
2019-09-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4135-1)
2019-09-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2613-1)
2021-04-19 00:00:00
CentOS Update for kernel CESA-2019:2863 centos6
2019-10-01 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4135-1)
2019-09-19 00:00:00
RHEL 8 : kernel (RHSA-2020:1372)
2020-08-07 00:00:00
CentOS 8 : kernel (CESA-2020:1372)
2021-02-01 00:00:00
cloudfoundry
cloudfoundry
USN-4135-1: Linux kernel vulnerabilities | Cloud Foundry
2019-09-30 00:00:00
redhat
redhat
(RHSA-2020:1372) Moderate: kernel security and bug fix update
2020-04-07 10:57:14
(RHSA-2019:2901) Important: kernel security update
2019-09-25 11:57:13
(RHSA-2019:2864) Important: kernel security update
2019-09-23 10:28:46
oraclelinux
oraclelinux
kernel security and bug fix update
2020-04-09 00:00:00
Unbreakable Enterprise kernel security update
2019-09-17 00:00:00
kernel security update
2019-09-23 00:00:00
redhatcve
redhatcve
prion
prion
Design/Logic Flaw
2019-09-13 13:15:00
Code injection
2019-09-13 13:15:00
Buffer overflow
2019-09-17 16:15:00
ubuntucve
ubuntucve
cvelist
cvelist
debiancve
debiancve
nvd
nvd
cve
cve
centos
centos
kernel, perf, python security update
2019-09-27 12:17:17
bpftool, kernel, perf, python security update
2019-10-02 16:02:22
huawei
huawei
Security Advisory - Buffer Overflow Vulnerability in QEMU-KVM
2020-01-15 00:00:00
ibm
ibm
f5
f5
K57536416 : Kernel vulnerability CVE-2019-14835
2020-10-19 00:00:00
virtuozzo
virtuozzo
fedora
fedora
[SECURITY] Fedora 30 Update: kernel-headers-5.2.15-200.fc30
2019-09-19 01:34:38
[SECURITY] Fedora 29 Update: kernel-headers-5.2.17-100.fc29
2019-10-02 01:42:27
[SECURITY] Fedora 29 Update: kernel-tools-5.2.17-100.fc29
2019-10-02 01:42:27
amazon
amazon
Important: kernel
2019-09-25 23:01:00
Important: kernel
2019-09-25 22:59:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2019-09-21 19:04:55
Updated kernel packages fix security vulnerabilities
2019-09-21 19:04:55
Updated kernel-linus packages fix security vulnerabilities
2019-11-20 00:16:53
debian
debian
[SECURITY] [DSA 4531-1] linux security update
2019-09-25 04:04:13
[SECURITY] [DLA 1940-1] linux-4.9 security update
2019-10-01 13:56:02
[SECURITY] [DSA 4531-1] linux security update
2019-09-25 04:04:13
osv
osv
linux - security update
2019-09-25 00:00:00
linux-4.9 - security update
2019-09-30 00:00:00
linux - security update
2019-09-24 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2019-09-25 00:00:00
Security update for the Linux Kernel (important)
2019-09-24 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-1.0-0252
2019-10-01 00:00:00
Important Photon OS Security Update - PHSA-2019-0252
2019-10-01 00:00:00
Critical Photon OS Security Update - PHSA-2019-0178
2019-09-23 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2019-11-07 22:31:40
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
29.4%
Related for OPENVAS:136141256231112201941352