The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3977-1 advisory.

    Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas,     Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian sterlund, Pietro Frigo, Kaveh Razavi,     Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered that memory     previously stored in microarchitectural fill buffers of an Intel CPU core may be exposed to a malicious     process that is executing on the same CPU core. A local attacker could use this to expose sensitive     information. (CVE-2018-12130)

    Brandon Falk, Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Stephan van Schaik, Alyssa Milburn,     Sebastian sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida discovered that     memory previously stored in microarchitectural load ports of an Intel CPU core may be exposed to a     malicious process that is executing on the same CPU core. A local attacker could use this to expose     sensitive information. (CVE-2018-12127)

    Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Marina Minkin, Daniel Moghimi, Moritz Lipp, Michael     Schwarz, Jo Van Bulck, Daniel Genkin, Daniel Gruss, Berk Sunar, Frank Piessens, and Yuval Yarom discovered     that memory previously stored in microarchitectural store buffers of an Intel CPU core may be exposed to a     malicious process that is executing on the same CPU core. A local attacker could use this to expose     sensitive information. (CVE-2018-12126)

    Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Volodrmyr Pikhur, Moritz Lipp, Michael Schwarz,     Daniel Gruss, Stephan van Schaik, Alyssa Milburn, Sebastian sterlund, Pietro Frigo, Kaveh Razavi,     Herbert Bos, and Cristiano Giuffrida discovered that uncacheable memory previously stored in     microarchitectural buffers of an Intel CPU core may be exposed to a malicious process that is executing on     the same CPU core. A local attacker could use this to expose sensitive information. (CVE-2019-11091)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Intel Microcode update (USN-3977-1)

medium Nessus Plugin ID 125136

Version 1.12

Version 1.11

Version 1.7

Version 1.12 May 28, 2024, 12:26 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202405281226
Version 1.11 Oct 21, 2023, 9:06 AM Detection Exploit attributes ("Exploit available" set to "False") Plugin metadata Plugin Feed: 202310210906
Version 1.7 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653