The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4209-1 advisory.

    Jann Horn discovered that the OverlayFS and ShiftFS Drivers in the Linux kernel did not properly handle     reference counting during memory mapping operations when used in conjunction with AUFS. A local attacker     could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
    (CVE-2019-15794)

    It was discovered that a buffer overflow existed in the 802.11 Wi-Fi configuration interface for the Linux     kernel when handling beacon settings. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2019-16746)

    It was discovered that there was a memory leak in the Advanced Buffer Management functionality of the     Netronome NFP4000/NFP6000 NIC Driver in the Linux kernel during certain error scenarios. A local attacker     could use this to cause a denial of service (memory exhaustion). (CVE-2019-19076)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c (CVE-2019-19816)

  - Kernel: use-after-free in btf_dump_name_dups in tools/lib/bpf/btf_dump.c (CVE-2022-3534)

  - drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial     of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the     relevance of this report because the failure can only occur for physically proximate attackers who unplug     SAS Host Bus Adapter cables (CVE-2018-10021)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
131563	Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4209-1)	Nessus	Ubuntu Local Security Checks	12/3/2019	8/27/2024	critical
199272	RHEL 8 : kernel (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/22/2024	high

Detections

Analytics

Plugins Search

critical

high