The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4318-1 advisory.

    Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A     local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive     information (kernel memory). (CVE-2020-8428)

    Gustavo Romero and Paul Mackerras discovered that the KVM implementation in the Linux kernel for PowerPC     processors did not properly keep guest state separate from host state. A local attacker in a KVM guest     could use this to cause a denial of service (host system crash). (CVE-2020-8834)

    Shijie Luo discovered that the ext4 file system implementation in the Linux kernel did not properly check     for a too-large journal size. An attacker could use this to construct a malicious ext4 image that, when     mounted, could cause a denial of service (soft lockup). (CVE-2020-8992)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
134559	openSUSE Security Update : the Linux Kernel (openSUSE-2020-336)	Nessus	SuSE Local Security Checks	2020/3/13	2024/3/22	critical
135269	Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4318-1)	Nessus	Ubuntu Local Security Checks	2020/4/7	2024/8/27	high
135525	EulerOS 2.0 SP3 : kernel (EulerOS-SA-2020-1396)	Nessus	Huawei Local Security Checks	2020/4/15	2023/4/25	critical
137516	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2020-1674)	Nessus	Huawei Local Security Checks	2020/6/17	2023/4/25	critical

検出

プラグインの検索

critical

high

critical

critical