Executive Summary
Summary | |
---|---|
Title | linux security update |
Informations | |||
---|---|---|---|
Name | DSA-3448 | First vendor Publication | 2016-01-19 |
Vendor | Debian | Last vendor Modification | 2016-01-19 |
Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C) | |||
---|---|---|---|
Cvss Base Score | 7.2 | Attack Range | Local |
Cvss Impact Score | 10 | Attack Complexity | Low |
Cvss Expoit Score | 3.9 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial-of-service. CVE-2013-4312 Tetsuo Handa discovered that it is possible for a process to open far more files than the process' limit leading to denial-of-service conditions. CVE-2015-7566 Ralf Spenneberg of OpenSource Security reported that the visor driver crashes when a specially crafted USB device without bulk-out endpoint is detected. CVE-2015-8767 An SCTP denial-of-service was discovered which can be triggered by a local attacker during a heartbeat timeout event after the 4-way handshake. CVE-2016-0723 A use-after-free vulnerability was discovered in the TIOCGETD ioctl. A local attacker could use this flaw for denial-of-service. CVE-2016-0728 The Perception Point research team discovered a use-after-free vulnerability in the keyring facility, possibly leading to local privilege escalation. For the stable distribution (jessie), these problems have been fixed in version 3.16.7-ckt20-1+deb8u3. We recommend that you upgrade your linux packages. |
Original Source
Url : http://www.debian.org/security/2016/dsa-3448 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
50 % | CWE-362 | Race Condition |
25 % | CWE-200 | Information Exposure |
25 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
CPE : Common Platform Enumeration
Snort® IPS/IDS
Date | Description |
---|---|
2016-03-14 | Linux Kernel keyring object exploit download attempt RuleID : 37438 - Revision : 2 - Type : OS-LINUX |
2016-03-14 | Linux Kernel keyring object exploit download attempt RuleID : 37437 - Revision : 2 - Type : OS-LINUX |
2016-03-14 | Linux Kernel keyring object exploit download attempt RuleID : 37436 - Revision : 2 - Type : OS-LINUX |
2016-03-14 | Linux Kernel keyring object exploit download attempt RuleID : 37435 - Revision : 2 - Type : OS-LINUX |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2017-05-01 | Name : The remote EulerOS host is missing multiple security updates. File : EulerOS_SA-2016-1020.nasl - Type : ACT_GATHER_INFO |
2017-04-03 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0057.nasl - Type : ACT_GATHER_INFO |
2017-01-31 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2017-0333-1.nasl - Type : ACT_GATHER_INFO |
2016-12-15 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20161103_kernel_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2016-12-05 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2976-1.nasl - Type : ACT_GATHER_INFO |
2016-11-28 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-2574.nasl - Type : ACT_GATHER_INFO |
2016-11-11 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-2574.nasl - Type : ACT_GATHER_INFO |
2016-11-04 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-2584.nasl - Type : ACT_GATHER_INFO |
2016-11-04 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-2574.nasl - Type : ACT_GATHER_INFO |
2016-09-23 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0100.nasl - Type : ACT_GATHER_INFO |
2016-09-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3083-1.nasl - Type : ACT_GATHER_INFO |
2016-09-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-3083-2.nasl - Type : ACT_GATHER_INFO |
2016-09-08 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2245-1.nasl - Type : ACT_GATHER_INFO |
2016-09-02 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-2074-1.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1672-1.nasl - Type : ACT_GATHER_INFO |
2016-08-29 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3596.nasl - Type : ACT_GATHER_INFO |
2016-08-25 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-1015.nasl - Type : ACT_GATHER_INFO |
2016-06-28 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-1341.nasl - Type : ACT_GATHER_INFO |
2016-06-27 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20160623_kernel_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2016-06-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-1301.nasl - Type : ACT_GATHER_INFO |
2016-06-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-1277.nasl - Type : ACT_GATHER_INFO |
2016-06-24 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-1277.nasl - Type : ACT_GATHER_INFO |
2016-06-24 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-1277.nasl - Type : ACT_GATHER_INFO |
2016-06-22 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0060.nasl - Type : ACT_GATHER_INFO |
2016-06-17 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20160510_kernel_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
2016-05-23 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0053.nasl - Type : ACT_GATHER_INFO |
2016-05-23 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3567.nasl - Type : ACT_GATHER_INFO |
2016-05-23 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3566.nasl - Type : ACT_GATHER_INFO |
2016-05-23 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3565.nasl - Type : ACT_GATHER_INFO |
2016-05-20 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0052.nasl - Type : ACT_GATHER_INFO |
2016-05-18 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3559.nasl - Type : ACT_GATHER_INFO |
2016-05-18 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-0855.nasl - Type : ACT_GATHER_INFO |
2016-05-17 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-0855.nasl - Type : ACT_GATHER_INFO |
2016-05-12 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2967-1.nasl - Type : ACT_GATHER_INFO |
2016-05-12 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0855.nasl - Type : ACT_GATHER_INFO |
2016-05-09 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0047.nasl - Type : ACT_GATHER_INFO |
2016-05-09 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3554.nasl - Type : ACT_GATHER_INFO |
2016-05-09 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0046.nasl - Type : ACT_GATHER_INFO |
2016-05-06 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20160504_kernel_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
2016-05-06 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3553.nasl - Type : ACT_GATHER_INFO |
2016-05-06 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3552.nasl - Type : ACT_GATHER_INFO |
2016-05-06 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3551.nasl - Type : ACT_GATHER_INFO |
2016-05-04 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1203-1.nasl - Type : ACT_GATHER_INFO |
2016-05-04 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0715.nasl - Type : ACT_GATHER_INFO |
2016-05-04 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-0715.nasl - Type : ACT_GATHER_INFO |
2016-05-04 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-0715.nasl - Type : ACT_GATHER_INFO |
2016-04-29 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-518.nasl - Type : ACT_GATHER_INFO |
2016-04-13 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-445.nasl - Type : ACT_GATHER_INFO |
2016-04-13 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2948-2.nasl - Type : ACT_GATHER_INFO |
2016-04-07 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2948-1.nasl - Type : ACT_GATHER_INFO |
2016-04-01 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-0911-1.nasl - Type : ACT_GATHER_INFO |
2016-03-17 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2930-3.nasl - Type : ACT_GATHER_INFO |
2016-03-17 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-0785-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2932-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2931-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2930-2.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2930-1.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2929-2.nasl - Type : ACT_GATHER_INFO |
2016-03-15 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2929-1.nasl - Type : ACT_GATHER_INFO |
2016-03-04 | Name : The remote Fedora host is missing a security update. File : fedora_2016-5d43766e33.nasl - Type : ACT_GATHER_INFO |
2016-03-04 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3503.nasl - Type : ACT_GATHER_INFO |
2016-03-04 | Name : The remote Fedora host is missing a security update. File : fedora_2016-26e19f042a.nasl - Type : ACT_GATHER_INFO |
2016-03-04 | Name : The remote Fedora host is missing a security update. File : fedora_2016-2f25d12c51.nasl - Type : ACT_GATHER_INFO |
2016-03-04 | Name : The remote Fedora host is missing a security update. File : fedora_2016-b59fd603be.nasl - Type : ACT_GATHER_INFO |
2016-02-29 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2908-5.nasl - Type : ACT_GATHER_INFO |
2016-02-29 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2908-4.nasl - Type : ACT_GATHER_INFO |
2016-02-29 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-0585-1.nasl - Type : ACT_GATHER_INFO |
2016-02-24 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-256.nasl - Type : ACT_GATHER_INFO |
2016-02-23 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2908-3.nasl - Type : ACT_GATHER_INFO |
2016-02-23 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2908-2.nasl - Type : ACT_GATHER_INFO |
2016-02-23 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2908-1.nasl - Type : ACT_GATHER_INFO |
2016-02-10 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2016-648.nasl - Type : ACT_GATHER_INFO |
2016-02-08 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-136.nasl - Type : ACT_GATHER_INFO |
2016-02-08 | Name : The remote Debian host is missing a security update. File : debian_DLA-412.nasl - Type : ACT_GATHER_INFO |
2016-02-04 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0065.nasl - Type : ACT_GATHER_INFO |
2016-02-03 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0103.nasl - Type : ACT_GATHER_INFO |
2016-02-03 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-124.nasl - Type : ACT_GATHER_INFO |
2016-02-03 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-116.nasl - Type : ACT_GATHER_INFO |
2016-01-27 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0068.nasl - Type : ACT_GATHER_INFO |
2016-01-26 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20160125_kernel_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
2016-01-26 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0064.nasl - Type : ACT_GATHER_INFO |
2016-01-26 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-0064.nasl - Type : ACT_GATHER_INFO |
2016-01-26 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-0064.nasl - Type : ACT_GATHER_INFO |
2016-01-25 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-0205-1.nasl - Type : ACT_GATHER_INFO |
2016-01-25 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-0186-1.nasl - Type : ACT_GATHER_INFO |
2016-01-21 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0005.nasl - Type : ACT_GATHER_INFO |
2016-01-21 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3509.nasl - Type : ACT_GATHER_INFO |
2016-01-21 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-3510.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2016-642.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2873-1.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2872-3.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2872-2.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2872-1.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2871-2.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2871-1.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2870-2.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2870-1.nasl - Type : ACT_GATHER_INFO |
2016-01-20 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3448.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2016-03-15 09:27:57 |
|
2016-03-05 13:26:43 |
|
2016-03-02 05:28:36 |
|
2016-03-01 21:29:57 |
|
2016-02-29 21:29:47 |
|
2016-02-25 17:26:02 |
|
2016-02-08 09:30:29 |
|
2016-01-21 13:25:38 |
|
2016-01-19 17:25:53 |
|
2016-01-19 17:21:44 |
|