The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2379-1 advisory.

    Steven Vittitoe reported multiple stack buffer overflows in Linux kernel's magicmouse HID driver. A     physically proximate attacker could exploit this flaw to cause a denial of service (system crash) or     possibly execute arbitrary code via specially crafted devices. (CVE-2014-3181)

    Ben Hawkes reported some off by one errors for report descriptors in the Linux kernel's HID stack. A     physically proximate attacker could exploit these flaws to cause a denial of service (out-of-bounds write)     via a specially crafted device. (CVE-2014-3184)

    Several bounds check flaws allowing for buffer overflows were discovered in the Linux kernel's Whiteheat     USB serial driver. A physically proximate attacker could exploit these flaws to cause a denial of service     (system crash) via a specially crafted device. (CVE-2014-3185)

    Steven Vittitoe reported a buffer overflow in the Linux kernel's PicoLCD HID device driver. A physically     proximate attacker could exploit this flaw to cause a denial of service (system crash) or possibly execute     arbitrary code via a specially craft device. (CVE-2014-3186)

    A flaw was discovered in the Linux kernel's associative-array garbage collection implementation. A local     user could exploit this flaw to cause a denial of service (system crash) or possibly have other     unspecified impact by using keyctl operations. (CVE-2014-3631)

    A flaw was discovered in the Linux kernel's UDF filesystem (used on some CD-ROMs and DVDs) when processing     indirect ICBs. An attacker who can cause CD, DVD or image file with a specially crafted inode to be     mounted can cause a denial of service (infinite loop or stack consumption). (CVE-2014-6410)

    James Eckersall discovered a buffer overflow in the Ceph filesystem in the Linux kernel. A remote attacker     could exploit this flaw to cause a denial of service (memory consumption and panic) or possibly have other     unspecified impact via a long unencrypted auth ticket. (CVE-2014-6416)

    James Eckersall discovered a flaw in the handling of memory allocation failures in the Ceph filesystem. A     remote attacker could exploit this flaw to cause a denial of service (system crash) or possibly have     unspecified other impact. (CVE-2014-6417)

    James Eckersall discovered a flaw in how the Ceph filesystem validates auth replies. A remote attacker     could exploit this flaw to cause a denial of service (system crash) or possibly have other unspecified     impact. (CVE-2014-6418)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2379-1)

high Nessus Plugin ID 78259

Version 1.15

Version 1.14

Version 1.14

Version 1.15 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.14 Oct 21, 2023, 5:06 AM CVSS metrics ("CVSSv2 score" changed from 7.8 to 7.2. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C" to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 score" set to 8.4) CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (set to "CVE-2014-3631") CVSSv3 score source (set to "CVE-2014-6416") Detection Plugin metadata Plugin Feed: 202310210506
Version 1.14 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856