Debian LTS Advisory ([SECURITY] [DLA 1930-1] linux security update)

Published: 2019-09-26 02:00:36
CVE Author: NIST National Vulnerability Database

CVSS Base Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Summary:
The remote host is missing an update for the 'linux' Linux Distribution Package(s) announced via the DSA-1930-1 advisory.

Detection Method:
Checks if a vulnerable Linux Distribution Package version is present on the target host.

Technical Details:
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2016-10905 A race condition was discovered in the GFS2 file-system implementation, which could lead to a use-after-free. On a system using GFS2, a local attacker could use this for denial of service (memory corruption or crash) or possibly for privilege escalation. CVE-2018-20976 It was discovered that the XFS file-system implementation did not correctly handle some mount failure conditions, which could lead to a use-after-free. The security impact of this is unclear. CVE-2018-21008 It was discovered that the rsi wifi driver did not correctly handle some failure conditions, which could lead to a use-after- free. The security impact of this is unclear. CVE-2019-0136 It was discovered that the wifi soft-MAC implementation (mac80211) did not properly authenticate Tunneled Direct Link Setup (TDLS) messages. A nearby attacker could use this for denial of service (loss of wifi connectivity). CVE-2019-9506 Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen discovered a weakness in the Bluetooth pairing protocols, dubbed the 'KNOB attack'. An attacker that is nearby during pairing could use this to weaken the encryption used between the paired devices, and then to eavesdrop on and/or spoof communication between them. This update mitigates the attack by requiring a minimum encryption key length of 56 bits. CVE-2019-14814, CVE-2019-14815, CVE-2019-14816 Multiple bugs were discovered in the mwifiex wifi driver, which could lead to heap buffer overflows. A local user permitted to configure a device handled by this driver could probably use this for privilege escalation. CVE-2019-14821 Matt Delco reported a race condition in KVM's coalesced MMIO facility, which could lead to out-of-bounds access in the kernel. A local attacker permitted to access /dev/kvm could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation. CVE-2019-14835 Peter Pi of Tencent Blade Team discovered a missing bounds check in vhost_net, the network back-end driver for KVM hosts, leading to a buffer overflow when the host begins live migration of a VM. An attacker in control of a VM could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation on the host. CVE-2019-15117 Hui Peng and Mathias Payer reported a missing bounds check in the usb-audio driver's descriptor parsing code, leading to a buffer over-read. An attacker able to add USB devices could possibly use this to cause a deni ... Description truncated. Please see the references for more information.

Affected Versions:
'linux' Linux Distribution Package(s) on Debian Linux.

Recommendations:
For Debian 8 'Jessie', these problems have been fixed in version 3.16.74-1. We recommend that you upgrade your linux Linux Distribution Packages.

Solution Type:
Vendor Patch

Detection Type:
Linux Distribution Package

NIST (National Institute of Standards and Technology) NVD (National Vulnerability Database)

https://nvd.nist.gov/vuln/detail/CVE-2016-10905
https://nvd.nist.gov/vuln/detail/CVE-2018-20976
https://nvd.nist.gov/vuln/detail/CVE-2018-21008
https://nvd.nist.gov/vuln/detail/CVE-2019-0136
https://nvd.nist.gov/vuln/detail/CVE-2019-14814
https://nvd.nist.gov/vuln/detail/CVE-2019-14815
https://nvd.nist.gov/vuln/detail/CVE-2019-14816
https://nvd.nist.gov/vuln/detail/CVE-2019-14821
https://nvd.nist.gov/vuln/detail/CVE-2019-14835
https://nvd.nist.gov/vuln/detail/CVE-2019-15117
https://nvd.nist.gov/vuln/detail/CVE-2019-15118
https://nvd.nist.gov/vuln/detail/CVE-2019-15211
https://nvd.nist.gov/vuln/detail/CVE-2019-15212
https://nvd.nist.gov/vuln/detail/CVE-2019-15215
https://nvd.nist.gov/vuln/detail/CVE-2019-15218
https://nvd.nist.gov/vuln/detail/CVE-2019-15219
https://nvd.nist.gov/vuln/detail/CVE-2019-15220
https://nvd.nist.gov/vuln/detail/CVE-2019-15221
https://nvd.nist.gov/vuln/detail/CVE-2019-15292
https://nvd.nist.gov/vuln/detail/CVE-2019-15807
https://nvd.nist.gov/vuln/detail/CVE-2019-15917
https://nvd.nist.gov/vuln/detail/CVE-2019-15926
https://nvd.nist.gov/vuln/detail/CVE-2019-9506

CVE Analysis

https://www.mageni.net/cve/CVE-2016-10905
https://www.mageni.net/cve/CVE-2018-20976
https://www.mageni.net/cve/CVE-2018-21008
https://www.mageni.net/cve/CVE-2019-0136
https://www.mageni.net/cve/CVE-2019-14814
https://www.mageni.net/cve/CVE-2019-14815
https://www.mageni.net/cve/CVE-2019-14816
https://www.mageni.net/cve/CVE-2019-14821
https://www.mageni.net/cve/CVE-2019-14835
https://www.mageni.net/cve/CVE-2019-15117
https://www.mageni.net/cve/CVE-2019-15118
https://www.mageni.net/cve/CVE-2019-15211
https://www.mageni.net/cve/CVE-2019-15212
https://www.mageni.net/cve/CVE-2019-15215
https://www.mageni.net/cve/CVE-2019-15218
https://www.mageni.net/cve/CVE-2019-15219
https://www.mageni.net/cve/CVE-2019-15220
https://www.mageni.net/cve/CVE-2019-15221
https://www.mageni.net/cve/CVE-2019-15292
https://www.mageni.net/cve/CVE-2019-15807
https://www.mageni.net/cve/CVE-2019-15917
https://www.mageni.net/cve/CVE-2019-15926
https://www.mageni.net/cve/CVE-2019-9506

References:

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
https://security-tracker.debian.org/tracker/DLA-1930-1

Severity
High
CVSS Score
10.0
Published
2019-09-26
Modified
2019-09-26
Category
Debian Local Security Checks

You never have to pay for a vulnerability scanning and management software again.

Tired of paying a subscription 'per asset' or 'per IP'? Well you can officially cancel your current subscription. Mageni provides a free, open source and enterprise-ready vulnerability scanning and management platform which helps you to find, prioritize, remediate and manage your vulnerabilities. It is free and always will be.