Language:
https://bugzilla.suse.com/show_bug.cgi?id=1001419
https://bugzilla.suse.com/show_bug.cgi?id=1002165
https://bugzilla.suse.com/show_bug.cgi?id=1004418
https://bugzilla.suse.com/show_bug.cgi?id=904970
https://bugzilla.suse.com/show_bug.cgi?id=907150
https://bugzilla.suse.com/show_bug.cgi?id=920615
https://bugzilla.suse.com/show_bug.cgi?id=920633
https://bugzilla.suse.com/show_bug.cgi?id=930408
Severity: High
ID: 94278
File Name: suse_SU-2016-2592-1.nasl
Version: 1.20
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 10/26/2016
Updated: 3/8/2022
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Factor: Critical
Score: 9.8
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Risk Factor: High
Base Score: 7.8
Temporal Score: 7.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CPE: p-cpe:/a:novell:suse_linux:kernel-xen-debuginfo, p-cpe:/a:novell:suse_linux:kernel-default-debuginfo, cpe:/o:novell:suse_linux:12, p-cpe:/a:novell:suse_linux:kernel-default-base, p-cpe:/a:novell:suse_linux:kernel-xen-debugsource, p-cpe:/a:novell:suse_linux:kernel-xen-base-debuginfo, p-cpe:/a:novell:suse_linux:kernel-xen, p-cpe:/a:novell:suse_linux:kernel-default-debugsource, p-cpe:/a:novell:suse_linux:kernel-default-devel, p-cpe:/a:novell:suse_linux:kernel-default-base-debuginfo, p-cpe:/a:novell:suse_linux:kernel-syms, p-cpe:/a:novell:suse_linux:kernel-default, p-cpe:/a:novell:suse_linux:kernel-xen-base, p-cpe:/a:novell:suse_linux:kernel-default-extra, p-cpe:/a:novell:suse_linux:kernel-xen-devel, p-cpe:/a:novell:suse_linux:kernel-default-man, p-cpe:/a:novell:suse_linux:kernel-default-extra-debuginfo
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/21/2016
Vulnerability Publication Date: 11/10/2016
CISA Known Exploited Vulnerability Due Dates: 3/24/2022
CANVAS (CANVAS)
Core Impact
CVE: CVE-2016-5195
IAVA: 2016-A-0306-S