The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2359-1 advisory.

    Jack Morgenstein reported a flaw in the page handling of the KVM (Kerenl Virtual Machine) subsystem in the     Linux kernel. A guest OS user could exploit this flaw to cause a denial of service (host OS memory     corruption) or possibly have other unspecified impact on the host OS. (CVE-2014-3601)

    Jason Gunthorpe reported a flaw with SCTP authentication in the Linux kernel. A remote attacker could     exploit this flaw to cause a denial of service (NULL pointer dereference and OOPS). (CVE-2014-5077)

    Chris Evans reported an flaw in the Linux kernel's handling of iso9660 (compact disk filesystem) images.
    An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause     a denial of service (system crash or reboot). (CVE-2014-5471)

    Chris Evans reported an flaw in the Linux kernel's handling of iso9660 (compact disk filesystem) images.
    An attacker who can mount a custom iso9660 image, with a self-referential CL entry, either via a CD/DVD     drive or a loopback mount could cause a denial of service (unkillable mount process). (CVE-2014-5472)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2359-1)

medium Nessus Plugin ID 77821

Version 1.16