Jann Horn 发现 eCryptfs 不当尝试使用较低文件系统的 mmap() 处理程序，而其并没有实现该处理程序，造成发生递归页面错误。本地非特权攻击者可利用来造成拒绝服务（系统崩溃）或可能以管理权限执行任意代码。(CVE-2016-1583)

Ralf Spenneberg 发现 Linux 内核中的 USB 声音子系统未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-2184)

Ralf Spenneberg 发现 Linux 内核中的 ATI Wonder Remote II USB 驱动程序未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-2185)

Ralf Spenneberg 发现 Linux 内核中的 PowerMate USB 驱动程序未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-2186)

Ralf Spenneberg 发现 Linux 内核的 GTCO 数字化器 USB 设备驱动程序未正确验证端点描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-2187)

Ralf Spenneberg 发现 Linux 内核中的 I/O-Warrior USB 设备驱动程序未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-2188)

Sergej Schumilo、Hendrik Schwartke 和 Ralf Spenneberg 发现 Linux 内核中的 MCT USB RS232 Converter 设备驱动程序未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-3136)

Sergej Schumilo、Hendrik Schwartke 和 Ralf Spenneberg 发现 Linux 内核中的 Cypress M8 USB 设备驱动程序未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。
(CVE-2016-3137)

Sergej Schumilo、Hendrik Schwartke 和 Ralf Spenneberg 发现调制解调器和 ISDN 适配器的 USB 抽象设备控制驱动程序未验证端点描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-3138)

Sergej Schumilo、Hendrik Schwartke 和 Ralf Spenneberg 发现 Linux 内核的 Digi AccelePort 串行转换器的 USB 驱动程序未正确验证 USB 设备描述符。具有物理访问权限的攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-3140)

已发现 Linux 内核中的 IPv4 实现未正确执行 inet 设备对象的销毁。客户机操作系统中的攻击者可利用此问题在主机操作系统中造成拒绝服务（网络中断）。(CVE-2016-3156)

Andy Lutomirski 发现 Linux 内核未正确在 64 位 PV Xen 客户机上执行 IOPL 上下文切换。客户机操作系统中的攻击者可利用此问题造成拒绝服务（客户机操作系统崩溃）、获取权限，或获取敏感信息。(CVE-2016-3157)

Hector Marco 和 Ismael Ripoll 发现，如果禁用了堆栈消耗资源限制，Linux 内核会针对在 32 位模式下运行的 x86 进程不当禁用地址空间布局随机化 (ASLR)。本地攻击者可利用此问题来更轻松地利用 setuid/setgid 程序中的现有漏洞。
(CVE-2016-3672)

已发现当在 Linux 内核的 USB/IP 实现中处理传入数据包时，可发生越界写入。远程攻击者可利用此问题造成拒绝服务（系统崩溃）或可能执行任意代码。(CVE-2016-3955)

Kangjie Lu 在 Linux 内核的 ANSI/IEEE 802.2 LLC 类型 2 支持实现中发现一个信息泄漏。本地攻击者可利用此问题从内核内存获取潜在敏感信息。(CVE-2016-4485)

Kangjie Lu 在 Linux 内核的路由 netlink 套接字接口 (rtnetlink) 实现中发现一个信息泄漏。本地攻击者可利用此问题从内核内存获取潜在敏感信息。(CVE-2016-4486)。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2970-1 advisory.

  - The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted USB device that lacks endpoints. (CVE-2015-7515)

  - Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local     users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE:
    this vulnerability exists because of a CVE-2012-6701 regression. (CVE-2015-8830)

  - The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1     before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it     easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an     uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.
    (CVE-2016-0821)

  - The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux     kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer     dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.
    (CVE-2016-2184)

  - The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor. (CVE-2016-2185)

  - The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor. (CVE-2016-2186)

  - The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor. (CVE-2016-2188)

  - The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1     allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system     crash) via a crafted USB device without two interrupt-in endpoint descriptors. (CVE-2016-3136)

  - drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an     interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and     cypress_open functions. (CVE-2016-3137)

  - The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically     proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB     device without both a control and a data endpoint descriptor. (CVE-2016-3138)

  - The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1     allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system     crash) via a crafted endpoints value in a USB device descriptor. (CVE-2016-3140)

  - The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which     allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large     number of IP addresses. (CVE-2016-3156)

  - The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-     switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial     of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.
    (CVE-2016-3157)

  - The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1     allows physically proximate attackers to cause a denial of service (system crash) via a USB device without     both a master and a slave interface. (CVE-2016-3689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.59 to receive various security and bugfixes.

Main feature additions :

  - Improved support for Clustered File System (CephFS,     fate#318586).

  - Addition of kGraft patches now produces logging messages     to simplify auditing (fate#317827).

The following security bugs were fixed :

  - CVE-2016-1583: Prevent the usage of mmap when the lower     file system does not allow it. This could have lead to     local privilege escalation when ecryptfs-utils was     installed and /sbin/mount.ecryptfs_private was setuid     (bsc#983143).

  - CVE-2014-9717: fs/namespace.c in the Linux kernel     processes MNT_DETACH umount2 system calls without     verifying that the MNT_LOCKED flag is unset, which     allowed local users to bypass intended access     restrictions and navigate to filesystem locations     beneath a mount by calling umount2 within a user     namespace (bnc#928547).

  - CVE-2016-2185: The ati_remote2_probe function in     drivers/input/misc/ati_remote2.c in the Linux kernel     allowed physically proximate attackers to cause a denial     of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor     (bnc#971124).

  - CVE-2016-2186: The powermate_probe function in     drivers/input/misc/powermate.c in the Linux kernel     allowed physically proximate attackers to cause a denial     of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor     (bnc#970958).

  - CVE-2016-2188: The iowarrior_probe function in     drivers/usb/misc/iowarrior.c in the Linux kernel allowed     physically proximate attackers to cause a denial of     service (NULL pointer dereference and system crash) via     a crafted endpoints value in a USB device descriptor     (bnc#970956).

  - CVE-2016-2847: fs/pipe.c in the Linux kernel did not     limit the amount of unread data in pipes, which allowed     local users to cause a denial of service (memory     consumption) by creating many pipes with non-default     sizes (bsc#970948).

  - CVE-2016-3134: The netfilter subsystem in the Linux     kernel did not validate certain offset fields, which     allowed local users to gain privileges or cause a denial     of service (heap memory corruption) via an     IPT_SO_SET_REPLACE setsockopt call (bnc#971126 971793).

  - CVE-2016-3136: The mct_u232_msr_to_state function in     drivers/usb/serial/mct_u232.c in the Linux kernel     allowed physically proximate attackers to cause a denial     of service (NULL pointer dereference and system crash)     via a crafted USB device without two interrupt-in     endpoint descriptors (bnc#970955).

  - CVE-2016-3137: drivers/usb/serial/cypress_m8.c in the     Linux kernel allowed physically proximate attackers to     cause a denial of service (NULL pointer dereference and     system crash) via a USB device without both an     interrupt-in and an interrupt-out endpoint descriptor,     related to the cypress_generic_port_probe and     cypress_open functions (bnc#970970).

  - CVE-2016-3138: The acm_probe function in     drivers/usb/class/cdc-acm.c in the Linux kernel allowed     physically proximate attackers to cause a denial of     service (NULL pointer dereference and system crash) via     a USB device without both a control and a data endpoint     descriptor (bnc#970911 970970).

  - CVE-2016-3140: The digi_port_init function in     drivers/usb/serial/digi_acceleport.c in the Linux kernel     allowed physically proximate attackers to cause a denial     of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor     (bnc#970892).

  - CVE-2016-3689: The ims_pcu_parse_cdc_data function in     drivers/input/misc/ims-pcu.c in the Linux kernel allowed     physically proximate attackers to cause a denial of     service (system crash) via a USB device without both a     master and a slave interface (bnc#971628).

  - CVE-2016-3951: Double free vulnerability in     drivers/net/usb/cdc_ncm.c in the Linux kernel allowed     physically proximate attackers to cause a denial of     service (system crash) or possibly have unspecified     other impact by inserting a USB device with an invalid     USB descriptor (bnc#974418).

  - CVE-2016-4482: Fixed information leak in devio     (bnc#978401).

  - CVE-2016-4486: Fixed information leak in rtnetlink (     bsc#978822).

  - CVE-2016-4569: Fixed information leak in events via     snd_timer_user_tinterrupt (bsc#979213).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: Buffer overflow due to unbounded strcpy in ISDN I4L driver (CVE-2017-12762)

  - kernel: buffer-overflow hardening in WiFi beacon validation code. (CVE-2019-16746)

  - include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group     ID of zero from reaching the swapper process, which allows local users to cause a denial of service     (system crash) by leveraging access to this process group. (CVE-2010-5328)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c     (CVE-2017-18017)

  - The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service     (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid     Register Stack Engine (RSE) state. (CVE-2006-3635)

  - drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize     videobuf_mapping data structures, which allows local users to trigger an incorrect count value and     videobuf leak via unspecified vectors, a different vulnerability than CVE-2010-5321. (CVE-2007-6761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2965-1 advisory.

  - The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux     kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer     dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.
    (CVE-2016-2184)

  - The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor. (CVE-2016-2185)

  - The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor. (CVE-2016-2186)

  - The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows     physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash)     via a crafted endpoints value in a USB device descriptor. (CVE-2016-2188)

  - The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1     allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system     crash) via a crafted USB device without two interrupt-in endpoint descriptors. (CVE-2016-3136)

  - drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an     interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and     cypress_open functions. (CVE-2016-3137)

  - The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically     proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB     device without both a control and a data endpoint descriptor. (CVE-2016-3138)

  - The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1     allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system     crash) via a crafted endpoints value in a USB device descriptor. (CVE-2016-3140)

  - The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which     allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large     number of IP addresses. (CVE-2016-3156)

  - The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-     switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial     of service (guest OS crash), or obtain sensitive information by leveraging I/O port access.
    (CVE-2016-3157)

  - The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not     properly randomize the legacy base address, which makes it easier for local users to defeat the intended     restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or     setgid program, by disabling stack-consumption resource limits. (CVE-2016-3672)

  - The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1     allows physically proximate attackers to cause a denial of service (system crash) via a USB device without     both a master and a slave interface. (CVE-2016-3689)

  - Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically     proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact     by inserting a USB device with an invalid USB descriptor. (CVE-2016-3951)

  - The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows     remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other     impact via a crafted length value in a USB/IP packet. (CVE-2016-3955)

  - The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does     not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial     of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.
    (CVE-2016-4557)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

  - CVE-2015-7515, CVE-2016-2184, CVE-2016-2185,     CVE-2016-2186, CVE-2016-2187, CVE-2016-3136,     CVE-2016-3137, CVE-2016-3138, CVE-2016-3140     Ralf Spenneberg of OpenSource Security reported that     various USB drivers do not sufficiently validate USB     descriptors. This allowed a physically present user with     a specially designed USB device to cause a denial of     service (crash).

  - CVE-2016-0821     Solar Designer noted that the list 'poisoning' feature,     intended to mitigate the effects of bugs in list     manipulation in the kernel, used poison values within     the range of virtual addresses that can be allocated by     user processes.

  - CVE-2016-1237     David Sinquin discovered that nfsd does not check     permissions when setting ACLs, allowing users to grant     themselves permissions to a file by setting the ACL.

  - CVE-2016-1583     Jann Horn of Google Project Zero reported that the     eCryptfs filesystem could be used together with the proc     filesystem to cause a kernel stack overflow. If the     ecryptfs-utils package is installed, local users could     exploit this, via the mount.ecryptfs_private program,     for denial of service (crash) or possibly for privilege     escalation.

  - CVE-2016-2117     Justin Yackoski of Cryptonite discovered that the     Atheros L2 ethernet driver incorrectly enables     scatter/gather I/O. A remote attacker could take     advantage of this flaw to obtain potentially sensitive     information from kernel memory.

  - CVE-2016-2143     Marcin Koscielnicki discovered that the fork     implementation in the Linux kernel on s390 platforms     mishandles the case of four page-table levels, which     allows local users to cause a denial of service (system     crash).

  - CVE-2016-3070     Jan Stancek of Red Hat discovered a local denial of     service vulnerability in AIO handling.

  - CVE-2016-3134     The Google Project Zero team found that the netfilter     subsystem does not sufficiently validate filter table     entries. A user with the CAP_NET_ADMIN capability could     use this for denial of service (crash) or possibly for     privilege escalation. Debian disables unprivileged user     namespaces by default, if locally enabled with the     kernel.unprivileged_userns_clone sysctl, this allows     privilege escalation.

  - CVE-2016-3156     Solar Designer discovered that the IPv4 implementation     in the Linux kernel did not perform the destruction of     inet device objects properly. An attacker in a guest OS     could use this to cause a denial of service (networking     outage) in the host OS.

  - CVE-2016-3157 / XSA-171     Andy Lutomirski discovered that the x86_64 (amd64) task     switching implementation did not correctly update the     I/O permission level when running as a Xen paravirtual     (PV) guest. In some configurations this would allow     local users to cause a denial of service (crash) or to     escalate their privileges within the guest.

  - CVE-2016-3672     Hector Marco and Ismael Ripoll noted that it was     possible to disable Address Space Layout Randomisation     (ASLR) for x86_32 (i386) programs by removing the stack     resource limit. This made it easier for local users to     exploit security flaws in programs that have the setuid     or setgid flag set.

  - CVE-2016-3951     It was discovered that the cdc_ncm driver would free     memory prematurely if certain errors occurred during its     initialisation. This allowed a physically present user     with a specially designed USB device to cause a denial     of service (crash) or possibly to escalate their     privileges.

  - CVE-2016-3955     Ignat Korchagin reported that the usbip subsystem did     not check the length of data received for a USB buffer.
    This allowed denial of service (crash) or privilege     escalation on a system configured as a usbip client, by     the usbip server or by an attacker able to impersonate     it over the network. A system configured as a usbip     server might be similarly vulnerable to physically     present users.

  - CVE-2016-3961 / XSA-174     Vitaly Kuznetsov of Red Hat discovered that Linux     allowed the use of hugetlbfs on x86 (i386 and amd64)     systems even when running as a Xen paravirtualised (PV)     guest, although Xen does not support huge pages. This     allowed users with access to /dev/hugepages to cause a     denial of service (crash) in the guest.

  - CVE-2016-4470     David Howells of Red Hat discovered that a local user     can trigger a flaw in the Linux kernel's handling of key     lookups in the keychain subsystem, leading to a denial     of service (crash) or possibly to privilege escalation.

  - CVE-2016-4482, CVE-2016-4485, CVE-2016-4486,     CVE-2016-4569, CVE-2016-4578, CVE-2016-4580,     CVE-2016-5243, CVE-2016-5244

    Kangjie Lu reported that the USB devio, llc, rtnetlink,     ALSA timer, x25, tipc, and rds facilities leaked     information from the kernel stack.

  - CVE-2016-4565     Jann Horn of Google Project Zero reported that various     components in the InfiniBand stack implemented unusual     semantics for the write() operation. On a system with     InfiniBand drivers loaded, local users could use this     for denial of service or privilege escalation.

  - CVE-2016-4581     Tycho Andersen discovered that in some situations the     Linux kernel did not handle propagated mounts correctly.
    A local user can take advantage of this flaw to cause a     denial of service (system crash).

  - CVE-2016-4805     Baozeng Ding discovered a use-after-free in the generic     PPP layer in the Linux kernel. A local user can take     advantage of this flaw to cause a denial of service     (system crash), or potentially escalate their     privileges.

  - CVE-2016-4913     Al Viro found that the ISO9660 filesystem implementation     did not correctly count the length of certain invalid     name entries. Reading a directory containing such name     entries would leak information from kernel memory. Users     permitted to mount disks or disk images could use this     to obtain sensitive information.

  - CVE-2016-4997 / CVE-2016-4998     Jesse Hertz and Tim Newsham discovered that missing     input sanitising in Netfilter socket handling may result     in denial of service. Debian disables unprivileged user     namespaces by default, if locally enabled with the     kernel.unprivileged_userns_clone sysctl, this also     allows privilege escalation.

ID	Name	Product	Family	Published	Updated	Severity
91559	Ubuntu 12.04 LTS：Linux 漏洞 (USN-2996-1)	Nessus	Ubuntu Local Security Checks	6/10/2016	1/12/2023	critical
91091	Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2970-1)	Nessus	Ubuntu Local Security Checks	5/12/2016	1/9/2024	high
93168	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:1696-1)	Nessus	SuSE Local Security Checks	8/29/2016	1/6/2021	high
199273	RHEL 6 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/14/2024	critical
199257	RHEL 5 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/4/2024	critical
91082	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-2965-1)	Nessus	Ubuntu Local Security Checks	5/12/2016	1/9/2024	critical
91886	Debian DSA-3607-1 : linux - security update	Nessus	Debian Local Security Checks	6/29/2016	1/11/2021	critical

Detections

Analytics

Plugins Search

critical

high

high

critical

critical

critical

critical