An information leak was discovered in the Linux kernel when reading broadcast messages from the notify_policy interface of the IPSec key_socket. A local user could exploit this flaw to examine potentially sensitive information in kernel memory. (CVE-2013-2237)

Kees Cook discovered flaw in the Human Interface Device (HID) subsystem of the Linux kernel. A physically proximate attacker could exploit this flaw to execute arbitrary code or cause a denial of service (heap memory corruption) via a specially crafted device that provides an invalid Report ID. (CVE-2013-2888)

Kees Cook discovered a flaw in the Human Interface Device (HID) subsystem of the Linux kerenl when CONFIG_HID_PANTHERLORD is enabled.
A physically proximate attacker could cause a denial of service (heap out-of-bounds write) via a specially crafted device. (CVE-2013-2892)

Kees Cook discovered a vulnerability in the Linux Kernel's Human Interface Device (HID) subsystem's support for N-Trig touch screens. A physically proximate attacker could exploit this flaw to cause a denial of service (OOPS) via a specially crafted device.
(CVE-2013-2896)

Kees Cook discovered an information leak in the Linux kernel's Human Interface Device (HID) subsystem when CONFIG_HID_SENSOR_HUB is enabled. A physically proximate attacker could obtain potentially sensitive information from kernel memory via a specially crafted device. (CVE-2013-2898)

Kees Cook discovered a flaw in the Human Interface Device (HID) subsystem of the Linux kernel whe CONFIG_HID_PICOLCD is enabled. A physically proximate attacker could exploit this flaw to cause a denial of service (OOPS) via a specially crafted device.
(CVE-2013-2899)

A flaw was discovered in how the Linux Kernel's networking stack checks scm credentials when used with namespaces. A local attacker could exploit this flaw to gain privileges. (CVE-2013-4300).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

讀取來自 IPSec key_socket 中 notify_policy 介面的廣播訊息時，在 Linux 核心中發現一個資訊洩漏瑕疵。本機使用者可惡意利用此瑕疵檢查核心記憶體中的敏感資訊。(CVE-2013-2237)

Kees Cook 發現 Linux 核心的人性化介面裝置 (HID) 子系統中有瑕疵。實際位置靠近的攻擊者可惡意利用此瑕疵，透過能提供無效報告 ID 的特製裝置，執行任意程式碼或引發拒絕服務 (堆積記憶體損毀)。(CVE-2013-2888)

Kees Cook 發現在啟用 CONFIG_HID_PANTHERLORD 的情況下，Linux 核心的人性化介面裝置 (HID) 子系統有一個瑕疵。
實際位置靠近的攻擊者可透過特製的裝置，引發拒絕服務 (超出邊界堆積寫入)。(CVE-2013-2892)

Kees Cook 發現，在 Linux 核心中，人性化介面 (HID) 子系統對 N-Trig 觸控螢幕的支援有一個弱點。實際位置靠近的攻擊者可惡意利用此瑕疵，透過特製的裝置引發拒絕服務 (OOPS)。
(CVE-2013-2896)

Kees Cook 發現，在啟用 CONFIG_HID_SENSOR_HUB 的情況下，Linux 核心的人性化介面裝置 (HID) 子系統有一個資訊洩漏瑕疵。實際位置靠近的攻擊者可能透過特製的裝置，取得核心記憶體的敏感資訊。(CVE-2013-2898)

Kees Cook 發現，在啟用 CONFIG_HID_PICOLCD 的情況下，Linux 核心的人性化介面 (HID) 子系統有一個瑕疵。實際位置靠近的攻擊者可惡意利用此瑕疵，透過特製的裝置引發拒絕服務 (OOPS)。
(CVE-2013-2899)

scm 認證和命名空間搭配使用時，Linux 核心的網路堆疊檢查該認證的方式有一個瑕疵。本機攻擊者可惡意利用此瑕疵取得權限。(CVE-2013-4300)。

Linux カーネルで、IPSec の key_socket の notify_policy インターフェイスからブロードキャストメッセージを読み込むときに、情報漏洩が発生することが発見されました。ローカルユーザーが、この欠陥を悪用して、カーネルメモリの機密情報を閲覧する可能性があります。(CVE-2013-2237)

Kees Cook 氏が、Linux カーネルのヒューマンインターフェイスデバイス（HID）サブシステムで欠陥を発見しました。物理的に接近した攻撃者が、この欠陥を利用して、無効なレポート ID を供給する特別に細工された装置で、任意のコードを実行したり、サービス拒否（ヒープメモリ破損）を引き起こしたりする可能性があります。(CVE-2013-2888)

Kees Cook 氏が、CONFIG_HID_PANTHERLORD が有効にされている際に Linux カーネルのヒューマンインターフェイスデバイス（HID）サブシステムに欠陥があることを発見しました。
物理的に接近した攻撃者が、特別に細工された装置によりサービス拒否（ヒープ領域外書き込み）を引き起こす可能性があります。(CVE-2013-2892)

Linux カーネルの N-Trig タッチスクリーン用のヒューマンインターフェイス装置（HID）サブシステムのサポートにある脆弱性を Kees Cook 氏が発見しました。物理的に接近した攻撃者が、この欠陥を利用して、特別に細工された装置でサービス拒否（OOPS）を引き起こす可能性があります。
(CVE-2013-2896)

CONFIG_HID_SENSOR_HUB を有効にしたときに Linux カーネルのヒューマンインターフェイス装置（HID）サブシステムで情報漏洩が発生することを、 Kees Cook 氏が発見しました。物理的に接近した攻撃者が、特別に細工された装置で、カーネルメモリから機密情報を取得する可能性があります。(CVE-2013-2898)

Kees Cook 氏が、CONFIG_HID_PICOLCD が有効にされているときに Linux カーネルのヒューマンインターフェイスデバイス（HID）サブシステムに欠陥があることを発見しました。物理的に接近した攻撃者が、この欠陥を利用して、特別に細工された装置でサービス拒否（OOPS）を引き起こす可能性があります。
(CVE-2013-2899)

名前空間とともに使用したときに Linux カーネルのネットワークスタックが scm 認証情報をチェックする方法で、欠陥が発見されています。ローカルの攻撃者が、この欠陥を悪用して権限を取得する可能性があります。（CVE-2013-4300）。

当读取 IPSec key_socket 的 notify_policy 界面的广播消息时，在 Linux 内核中发现信息泄漏。本地用户可利用此缺陷检查内核内存中的潜在敏感信息。(CVE-2013-2237)

Kees Cook 在 Linux 内核的人机接口设备 (HID) 子系统中发现一个缺陷。物理邻近攻击者可利用此缺陷，通过特别构建的提供无效报告 ID 的设备执行任意代码或造成拒绝服务（堆内存损坏）。(CVE-2013-2888)

当启用 CONFIG_HID_PANTHERLORD 时，Kees Cook 在 Linux 内核的人机接口设备 (HID) 子系统中发现一个缺陷。
物理邻近攻击者可通过特别构建的设备造成拒绝服务（堆越界写入）。(CVE-2013-2892)

Kees Cook 在 Linux 内核的人机接口设备 (HID) 子系统的 N-Trig 触摸屏支持中发现一个漏洞。物理邻近攻击者可利用此缺陷，通过特别构建的设备造成拒绝服务 (OOPS)。
(CVE-2013-2896)

当启用 CONFIG_HID_SENSOR_HUB 时，Kees Cook 在 Linux 内核的人机接口设备 (HID) 子系统中发现信息泄漏。物理邻近攻击者可通过特别构建的设备获取内核内存中的潜在敏感信息。(CVE-2013-2898)

当启用 CONFIG_HID_PICOLCD 时，Kees Cook 在人机接口设备 (HID) 子系统中发现一个缺陷。物理邻近攻击者可利用此缺陷，通过特别构建的设备造成拒绝服务 (OOPS)。
(CVE-2013-2899)

当使用命名空间时，在 Linux 内核的网络堆栈检查 scm 凭据的方式中发现一个缺陷。本地攻击者可利用此缺陷获得权限。(CVE-2013-4300)。

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - net/ceph/auth_none.c in the Linux kernel through 3.10     allows remote attackers to cause a denial of service     (NULL pointer dereference and system crash) or possibly     have unspecified other impact via an auth_reply message     that triggers an attempted build_request     operation.(CVE-2013-1059)

  - The dispatch_discard_io function in     drivers/block/xen-blkback/blkback.c in the Xen blkback     implementation in the Linux kernel before 3.10.5 allows     guest OS users to cause a denial of service (data loss)     via filesystem write operations on a read-only disk     that supports the (1) BLKIF_OP_DISCARD (aka discard or     TRIM) or (2) SCSI UNMAP feature.(CVE-2013-2140)

  - The mmc_ioctl_cdrom_read_data function in     drivers/cdrom/cdrom.c in the Linux kernel through 3.10     allows local users to obtain sensitive information from     kernel memory via a read operation on a malfunctioning     CD-ROM drive.(CVE-2013-2164)

  - Multiple array index errors in drivers/hid/hid-core.c     in the Human Interface Device (HID) subsystem in the     Linux kernel through 3.11 allow physically proximate     attackers to execute arbitrary code or cause a denial     of service (heap memory corruption) via a crafted     device that provides an invalid Report     ID.(CVE-2013-2888)

  - drivers/hid/hid-zpff.c in the Human Interface Device     (HID) subsystem in the Linux kernel through 3.11, when     CONFIG_HID_ZEROPLUS is enabled, allows physically     proximate attackers to cause a denial of service     (heap-based out-of-bounds write) via a crafted     device.(CVE-2013-2889)

  - drivers/hid/hid-pl.c in the Human Interface Device     (HID) subsystem in the Linux kernel through 3.11, when     CONFIG_HID_PANTHERLORD is enabled, allows physically     proximate attackers to cause a denial of service     (heap-based out-of-bounds write) via a crafted     device.(CVE-2013-2892)

  - A flaw was found in the way the get_dumpable() function     return value was interpreted in the ptrace subsystem of     the Linux kernel. When 'fs.suid_dumpable' was set to 2,     a local, unprivileged local user could use this flaw to     bypass intended ptrace restrictions and obtain     potentially sensitive information.(CVE-2013-2929)

  - The perf_trace_event_perm function in     kernel/trace/trace_event_perf.c in the Linux kernel     before 3.12.2 does not properly restrict access to the     perf subsystem, which allows local users to enable     function tracing via a crafted     application.(CVE-2013-2930)

  - The fib6_add_rt2node function in net/ipv6/ip6_fib.c in     the IPv6 stack in the Linux kernel through 3.10.1 does     not properly handle Router Advertisement (RA) messages     in certain circumstances involving three routes that     initially qualified for membership in an ECMP route set     until a change occurred for one of the first two     routes, which allows remote attackers to cause a denial     of service (system crash) via a crafted sequence of     messages.(CVE-2013-4125)

  - Use-after-free vulnerability in the     vhost_net_set_backend function in drivers/vhost/net.c     in the Linux kernel through 3.10.3 allows local users     to cause a denial of service (OOPS and system crash)     via vectors involving powering on a virtual     machine.(CVE-2013-4127)

  - The udp_v6_push_pending_frames function in     net/ipv6/udp.c in the IPv6 implementation in the Linux     kernel through 3.10.3 makes an incorrect function call     for pending data, which allows local users to cause a     denial of service (BUG and system crash) via a crafted     application that uses the UDP_CORK option in a     setsockopt system call.(CVE-2013-4162)

  - The ip6_append_data_mtu function in     net/ipv6/ip6_output.c in the IPv6 implementation in the     Linux kernel through 3.10.3 does not properly maintain     information about whether the IPV6_MTU setsockopt     option had been specified, which allows local users to     cause a denial of service (BUG and system crash) via a     crafted application that uses the UDP_CORK option in a     setsockopt system call.(CVE-2013-4163)

  - Memory leak in the unshare_userns function in     kernel/user_namespace.c in the Linux kernel before     3.10.6 allows local users to cause a denial of service     (memory consumption) via an invalid CLONE_NEWUSER     unshare call.(CVE-2013-4205)

  - Off-by-one error in the build_unc_path_to_root function     in fs/cifs/connect.c in the Linux kernel before 3.9.6     allows remote attackers to cause a denial of service     (memory corruption and system crash) via a DFS share     mount operation that triggers use of an unexpected DFS     referral name length.(CVE-2013-4247)

  - The net_ctl_permissions function in net/sysctl_net.c in     the Linux kernel before 3.11.5 does not properly     determine uid and gid values, which allows local users     to bypass intended /proc/sys/net restrictions via a     crafted application.(CVE-2013-4270)

  - Interpretation conflict in     drivers/md/dm-snap-persistent.c in the Linux kernel     through 3.11.6 allows remote authenticated users to     obtain sensitive information or modify data via a     crafted mapping to a snapshot block     device.(CVE-2013-4299)

  - The scm_check_creds function in net/core/scm.c in the     Linux kernel before 3.11 performs a capability check in     an incorrect namespace, which allows local users to     gain privileges via PID spoofing.(CVE-2013-4300)

  - It was found that the Linux kernel did not properly     account file descriptors passed over the unix socket     against the process limit. A local user could use this     flaw to exhaust all available memory on the     system.(CVE-2013-4312)

  - Use-after-free vulnerability in drivers/net/tun.c in     the Linux kernel through 3.11.1 allows local users to     gain privileges by leveraging the CAP_NET_ADMIN     capability and providing an invalid tuntap interface     name in a TUNSETIFF ioctl call.(CVE-2013-4343)

  - Off-by-one error in the get_prng_bytes function in     crypto/ansi_cprng.c in the Linux kernel through 3.11.4     makes it easier for context-dependent attackers to     defeat cryptographic protection mechanisms via multiple     requests for small amounts of data, leading to improper     management of the state of the consumed     data.(CVE-2013-4345)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
70543	Ubuntu 13.04 : linux vulnerabilities (USN-1998-1)	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70541	Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-1995-1)	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70541	Ubuntu 12.04 LTS：linux-lts-raring 弱點 (USN-1995-1)	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70543	Ubuntu 13.04：linux の脆弱性（USN-1998-1）	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70541	Ubuntu 12.04 LTS：linux-lts-raring 脆弱性（USN-1995-1）	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70543	Ubuntu 13.04：Linux 漏洞 (USN-1998-1)	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70543	Ubuntu 13.04：linux 弱點 (USN-1998-1)	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
70541	Ubuntu 12.04 LTS：linux-lts-raring 漏洞 (USN-1995-1)	Nessus	Ubuntu Local Security Checks	10/22/2013	9/19/2019	high
124797	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1473)	Nessus	Huawei Local Security Checks	5/13/2019	5/23/2024	medium

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

medium