The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3930-2 advisory.

    USN-3930-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.10 for Ubuntu 18.04     LTS.

    Mathias Payer and Hui Peng discovered a use-after-free vulnerability in the Advanced Linux Sound     Architecture (ALSA) subsystem. A physically proximate attacker could use this to cause a denial of service     (system crash). (CVE-2018-19824)

    Shlomi Oberman, Yuli Shapiro, and Ran Menscher discovered an information leak in the Bluetooth     implementation of the Linux kernel. An attacker within Bluetooth range could use this to expose sensitive     information (kernel memory). (CVE-2019-3459, CVE-2019-3460)

    Jann Horn discovered that the KVM implementation in the Linux kernel contained a use-after-free     vulnerability. An attacker in a guest VM with access to /dev/kvm could use this to cause a denial of     service (guest VM crash). (CVE-2019-6974)

    Jim Mattson and Felix Wilhelm discovered a use-after-free vulnerability in the KVM subsystem of the Linux     kernel, when using nested virtual machines. A local attacker in a guest VM could use this to cause a     denial of service (system crash) or possibly execute arbitrary code in the host system. (CVE-2019-7221)

    Felix Wilhelm discovered that an information leak vulnerability existed in the KVM subsystem of the Linux     kernel, when nested virtualization is used. A local attacker could use this to expose sensitive     information (host system memory to a guest VM). (CVE-2019-7222)

    Jann Horn discovered that the eBPF implementation in the Linux kernel was insufficiently hardened against     Spectre V1 attacks. A local attacker could use this to expose sensitive information. (CVE-2019-7308)

    It was discovered that a use-after-free vulnerability existed in the user- space API for crypto (af_alg)     implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2019-8912)

    Jakub Jirasek discovered a use-after-free vulnerability in the SCTP implementation in the Linux kernel. A     local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2019-8956)

    It was discovered that the Linux kernel did not properly deallocate memory when handling certain errors     while reading files. A local attacker could use this to cause a denial of service (excessive memory     consumption). (CVE-2019-8980)

    It was discovered that a use-after-free vulnerability existed in the IPMI implementation in the Linux     kernel. A local attacker with access to the IPMI character device files could use this to cause a denial     of service (system crash). (CVE-2019-9003)

    Jann Horn discovered that the SNMP NAT implementation in the Linux kernel performed insufficient ASN.1     length checks. An attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2019-9162)

    Jann Horn discovered that the mmap implementation in the Linux kernel did not properly check for the mmap     minimum address in some situations. A local attacker could use this to assist exploiting a kernel NULL     pointer dereference vulnerability. (CVE-2019-9213)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol (L2CAP), part of the Bluetooth stack in the l2cap_parse_conf_rsp and l2cap_parse_conf_req functions. An attacker with physical access within the range of standard Bluetooth transmission can create a specially crafted packet. The response to this specially crafted packet can contain part of the kernel stack which can be used in a further attack. (CVE-2019-3460)

A bypass was found for the Spectre v1 hardening in the eBPF engine of the Linux kernel. The code in the kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks. (CVE-2019-7308)

A flaw was found in the Linux kernels implementation of Logical link control and adaptation protocol (L2CAP), part of the Bluetooth stack.
An attacker with physical access within the range of standard Bluetooth transmission can create a specially crafted packet. The response to this specially crafted packet can contain part of the kernel stack which can be used in a further attack. (CVE-2019-3459)

ID	Name	Product	Family	Published	Updated	Severity
123677	Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3930-2)	Nessus	Ubuntu Local Security Checks	4/3/2019	8/27/2024	high
124654	Amazon Linux AMI : kernel (ALAS-2019-1201)	Nessus	Amazon Linux Local Security Checks	5/7/2019	5/28/2024	medium
122578	openSUSE Security Update : the Linux Kernel (openSUSE-2019-274)	Nessus	SuSE Local Security Checks	3/4/2019	1/19/2021	high

Detections

Analytics

Plugins Search

high

medium

high