The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2447-1 advisory.

    Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack     Segment (SS) register in the x86 architecture. A local attacker could exploit this flaw to gain     administrative privileges. (CVE-2014-9322)

    An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel     stack address on 32-bit Kernel Virtual Machine (KVM) paravirt guests. A user in the guest OS could exploit     this leak to obtain information that could potentially be used to aid in attacking the kernel.
    (CVE-2014-8134)

    Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does     not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of     service (OOPS). (CVE-2014-7826)

    A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol)     implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a     denial of service (system crash). (CVE-2014-3673)

    A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol)     implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a     denial of service (panic). (CVE-2014-3687)

    It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in     the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of     service. (CVE-2014-3688)

    Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the perf subsystem of the Linux     kernel handles private systecall numbers. A local user could exploit this to cause a denial of service     (OOPS) or bypass ASLR protections via a crafted application. (CVE-2014-7825)

    Andy Lutomirski discovered a flaw in how the Linux kernel handles pivot_root when used with a chroot     directory. A local user could exploit this flaw to cause a denial of service (mount-tree loop).
    (CVE-2014-7970)

    Dmitry Monakhov discovered a race condition in the ext4_file_write_iter function of the Linux kernel's     ext4 filesystem. A local user could exploit this flaw to cause a denial of service (file unavailability).
    (CVE-2014-8086)

    The KVM (kernel virtual machine) subsystem of the Linux kernel miscalculates the number of memory pages     during the handling of a mapping failure. A guest OS user could exploit this to cause a denial of service     (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges.
    (CVE-2014-8369)

    Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack     Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial     of service (panic). (CVE-2014-9090)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2447-1)

high Nessus Plugin ID 80033

Version 1.20

Version 1.19

Version 1.20 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.19 Oct 21, 2023, 5:06 AM CVE (set "CVE" coverage to "CVE-2014-3673,CVE-2014-3687,CVE-2014-3688,CVE-2014-7825,CVE-2014-7826,CVE-2014-7970,CVE-2014-8086,CVE-2014-8134,CVE-2014-8369,CVE-2014-9090,CVE-2014-9322") CVSS metrics ("CVSSv2 score" changed from 7.8 to 7.2. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C" to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (set to "CVE-2014-9322") Detection Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin metadata Plugin Feed: 202310210506