The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6700-1 advisory.

    It was discovered that the Layer 2 Tunneling Protocol (L2TP) implementation in the Linux kernel contained     a race condition when releasing PPPoL2TP sockets in certain conditions, leading to a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2022-20567)

    It was discovered that the ext4 file system implementation in the Linux kernel did not properly handle     block device modification while it is mounted. A privileged attacker could use this to cause a denial of     service (system crash) or possibly expose sensitive information. (CVE-2023-34256)

    Eric Dumazet discovered that the netfilter subsystem in the Linux kernel did not properly handle DCCP     conntrack buffers in certain situations, leading to an out-of-bounds read vulnerability. An attacker could     possibly use this to expose sensitive information (kernel memory). (CVE-2023-39197)

    It was discovered that a race condition existed in the AppleTalk networking subsystem of the Linux kernel,     leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2023-51781)

    It was discovered that the ext4 file system implementation in the Linux kernel did not properly handle the     remount operation in certain cases, leading to a use-after-free vulnerability. A local attacker could use     this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2024-0775)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-6700-1)

high Nessus Plugin ID 192220

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Aug 28, 2024, 7:43 PM CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata CVSS metrics ("Cvssv4 score" set to 0.0) Plugin Feed: 202408281943
Version 1.3 May 31, 2024, 1:01 AM CISA reference Plugin Feed: 202405310101
Version 1.2 Apr 5, 2024, 1:58 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202404051358
Version 1.1 Mar 27, 2024, 2:17 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202403271417
Version 1.0 Mar 19, 2024, 4:49 AM New Plugin Feed: 202403190449