The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3576-1 advisory.

    Vivian Zhang and Christoph Anton Mitterer discovered that libvirt incorrectly disabled password     authentication when the VNC password was set to an empty string. A remote attacker could possibly use this     issue to bypass authentication, contrary to expectations. This issue only affected Ubuntu 14.04 LTS and     Ubuntu 16.04 LTS. (CVE-2016-5008)

    Daniel P. Berrange discovered that libvirt incorrectly handled validating SSL/TLS certificates. A remote     attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu     17.10. (CVE-2017-1000256)

    Daniel P. Berrange and Peter Krempa discovered that libvirt incorrectly handled large QEMU replies. An     attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service.
    (CVE-2018-5748)

    Pedro Sampaio discovered that libvirt incorrectly handled the libnss_dns.so module. An attacker in a     libvirt_lxc session could possibly use this issue to execute arbitrary code. This issue only affected     Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-6764)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS : libvirt vulnerabilities (USN-3576-1)

critical Nessus Plugin ID 106928

Version 3.8