Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 发现一个影响版本低于 4.17 的 Linux 内核的缺陷。通过将由 FUSE 支持的文件映射至包含命令行参数（或环境字符串）的进程内存，攻击者可无限期地（拒绝服务）或在某些受控时间内（作为其他攻击的同步原语）阻止来自 psutils 或 procps（如 ps、w）的实用工具或任何其他对 /proc/<pid>/cmdline（或 /proc/<pid>/environ）文件进行 read() 调用的程序。(CVE-2018-1120)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

远程 Ubuntu 16.04 LTS 主机上安装的一个程序包受到 USN-3910-1 公告中提及的多个漏洞影响。

  - 在 4.13 之前的 Linux 内核中，fs/f2fs/segment.c 让本地用户可以通过使用 noflush_merge 选项（会触发 flush_cmd_control 数据结构的空值）来造成拒绝服务（空指针取消引用和错误）。(CVE-2017-18241)

  - 发现一个影响版本低于 4.17 的 Linux 内核的缺陷。通过将由 FUSE 支持的文件映射至包含命令行参数（或环境字符串）的进程内存，攻击者可无限期地（拒绝服务）或在某些受控时间内（作为其他攻击的同步原语）阻止来自 psutils 或 procps（如 ps、w）的实用工具或任何其他对 /proc/<pid>/cmdline（或 /proc/<pid>/environ）文件进行 read() 调用的程序。(CVE-2018-1120)

  - 在 Linux 内核 4.19.8 及之前版本中，drivers/net/usb/hso.c 中的 hso_get_config_data 函数可从 USB 设备（作为 u8）读取 if_num，并使用该值进行小数组索引，从而导致对象越界 (OOB) 读取，这使攻击者可能在内核地址空间中进行任意读取。(CVE-2018-19985)

  - 在 Linux 内核 4.15.7 及之前版本中，本地用户可利用 mm/hugetlb.c 中的 resv_map_release 函数，通过进行 mmap 系统调用并对 remap_file_pages 系统调用使用较大 pgoff 参数的构建应用程序，造成拒绝服务（错误）。(CVE-2018-7740)

  - 在 PolicyKit（亦即 polkit）0.115 中，可绕过启动时间保护机制，由于 fork() 不是原子函数，因此未正确缓存授权决策。此问题与 polkitbackend/polkitbackendinteractiveauthority.c 中缺少 uid 检查相关。(CVE-2019-6133)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Ubuntu 14.04 LTS 主机上安装的一个程序包受到 USN-3910-2 公告中提及的多个漏洞影响。

  - 在 4.13 之前的 Linux 内核中，fs/f2fs/segment.c 让本地用户可以通过使用 noflush_merge 选项（会触发 flush_cmd_control 数据结构的空值）来造成拒绝服务（空指针取消引用和错误）。(CVE-2017-18241)

  - 发现一个影响版本低于 4.17 的 Linux 内核的缺陷。通过将由 FUSE 支持的文件映射至包含命令行参数（或环境字符串）的进程内存，攻击者可无限期地（拒绝服务）或在某些受控时间内（作为其他攻击的同步原语）阻止来自 psutils 或 procps（如 ps、w）的实用工具或任何其他对 /proc/<pid>/cmdline（或 /proc/<pid>/environ）文件进行 read() 调用的程序。(CVE-2018-1120)

  - 在 Linux 内核 4.19.8 及之前版本中，drivers/net/usb/hso.c 中的 hso_get_config_data 函数可从 USB 设备（作为 u8）读取 if_num，并使用该值进行小数组索引，从而导致对象越界 (OOB) 读取，这使攻击者可能在内核地址空间中进行任意读取。(CVE-2018-19985)

  - 在 Linux 内核 4.15.7 及之前版本中，本地用户可利用 mm/hugetlb.c 中的 resv_map_release 函数，通过进行 mmap 系统调用并对 remap_file_pages 系统调用使用较大 pgoff 参数的构建应用程序，造成拒绝服务（错误）。(CVE-2018-7740)

  - 在 PolicyKit（亦即 polkit）0.115 中，可绕过启动时间保护机制，由于 fork() 不是原子函数，因此未正确缓存授权决策。此问题与 polkitbackend/polkitbackendinteractiveauthority.c 中缺少 uid 检查相关。(CVE-2019-6133)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

内核的更新现在可用于 Red Hat Enterprise Linux 7。Red Hat 产品安全团队将此更新评级为具有重要安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。内核程序包中包含 Linux 内核，后者是任何 Linux 操作系统的核心。安全修复：* 在 Linux 内核处理碎片化 IPv4 和 IPv6 数据包重组的方式中，发现名为 FragmentSmack 的缺陷。远程攻击者可利用此缺陷，通过发送特制数据包来触发占用大量时间和计算资源的碎片重组算法，可导致 CPU 饱和，从而造成该系统拒绝服务。(CVE-2018-5391) * 内核：kernel/time/ posix-timers.c 的 show_timer 函数中存在越界访问 (CVE-2017-18344) * 内核：udl_fb_mmap() 中的整数溢出可让攻击者在内核空间中执行代码 (CVE-2018-8781) * 内核：MIDI 驱动程序争用条件导致双重释放 (CVE-2018-10902) * 内核：inode_init_owner() 中的缺失检查未能清除非会员的非目录上的 SGID 位 (CVE-2018-13405) * 内核：在部分协议中，AIO 写入触发整数溢出 (CVE-2015-8830) * 内核：ALSA 子系统的 snd_pcm_info 函数中发现释放后使用，可能导致特权提升 (CVE-2017-0861) * 内核：might_cancel 序列的处理未能正确防范争用 (CVE-2017-10661) * 内核：Salsa20 加密算法未能正确处理零长度输入，让本地攻击者造成拒绝服务 (CVE-2017-17805) * 内核：在 madvise_willneed() 函数中的无线循环漏洞导致本地拒绝服务 (CVE-2017-18208) * 内核：fuse 支持文件 mmap 至进程 cmdline 参数造成拒绝服务 (CVE-2018-1120) * 内核：dccp_write_xmit() 中的空指针取消引用导致系统崩溃 (CVE-2018-1130) * 内核：drivers/block/loop.c 错误处理 lo_release 序列化导致拒绝服务 (CVE-2018-5344) * 内核：_sctp_make_chunk() 函数中缺失负载长度检查导致拒绝服务 (CVE-2018-5803) * 内核：drivers/net/wireless/ath/wil6210/ wmi.c:wmi_set_ie() 中的缓冲区溢出可导致内存损坏 (CVE-2018-5848) * 内核：使用特制 ext4 图像时，ext4_init_block_bitmap 函数中存在越界写入( CVE-2018-10878) * 内核：bnx2x 网卡驱动程序中的不当验证可通过特制数据包，导致拒绝服务攻击 (CVE-2018-1000026) * 内核：处理包含 NUL 的 NM 条目时，发现信息泄露 (CVE-2016-4913) * 内核：在 libsas 内不当处理 mutex 导致本地拒绝服务 (CVE-2017-18232) * 内核：当安装特制 ext4 图像时，在 ext4_process_freed_data() 中发现空指针取消引用 (CVE-2018-1092) * 内核：ext4_xattr_inode_hash() 中的空指针取消引用，在使用特制 ext4 图像时造成崩溃 (CVE-2018-1094) * 内核：vhost：在 vhost/vhost.c:vhost_new_msg() 中发现信息泄露 (CVE-2018-1118) * 内核：在 mm/hugetlb.c 的 resv_map_release 函数中发现拒绝服务 (CVE-2018-7740) * 内核：在 drivers/scsi/ libsas/sas_expander.c 的 sas_smp_get_phy_events 函数中发现内存泄露 (CVE-2018-7757) * 内核：当安装特制 xfs 图像时，xfs_ilock_attr_map_shared() 中的无效指针取消引用导致拒绝服务 (CVE-2018-10322) * 内核：使用特制文件时，在 ext4_xattr_set_entry 中发现释放后使用 (CVE-2018-10879) * 内核：当安装和操作特制 ext4 图像时，在 ext4_get_group_info() 中发现越界访问 (CVE-2018-10881) * 内核：在 jbd2_journal_dirty_metadata 函数中发现堆栈越界写入 (CVE-2018-10883) * 内核：在 drivers/cdrom/cdrom.c 中发现错误内存边界检查 (CVE-2018-10940) Red Hat 在此感谢 Juha-Matti Tilli（阿尔托大学通信与网络系及 Nokia Bell Labs）报告 CVE-2018-5391，Trend Micro Zero Day Initiative 报告 CVE-2018-10902，Qualys Research Labs 报告 CVE-2018-1120，Evgenii Shatokhin (Virtuozzo Team) 报告 CVE-2018-1130 以及 Wen Xu 报告 CVE-2018-1092 和 CVE-2018-1094。

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3083 advisory.

    - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
    - [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
    - [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
    - [fs] fs: get_rock_ridge_filename(): handle malformed NM entries (Bill O'Donnell) [1340778]     {CVE-2016-4913}
    - [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552982]     {CVE-2017-18208}
    - [kernel] posix-timer: Properly check sigevent->sigev_notify (Phil Auld) [1613711] {CVE-2017-18344}
    - [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593087] {CVE-2018-10902}
    - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600953] {CVE-2018-13405}
    - [scsi] libsas: fix memory leak in sas_smp_get_phy_events() (Tomas Henzl) [1558582] {CVE-2018-7757}
    - [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573705] {CVE-2018-1118}
    - [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613924] {CVE-2018-5391}
    - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613924] {CVE-2018-5391}
    - [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613924] {CVE-2018-5391}
    - [net] revert ipv4: use skb coalescing in defragmentation (Sabrina Dubroca) [1613924] {CVE-2018-5391}
    - [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613924]     {CVE-2018-5391}
    - [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613924] {CVE-2018-5391}
    - [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613924] {CVE-2018-5391}
    - [fs] timerfd: Protect the might cancel mechanism proper (Bill O'Donnell) [1485407] {CVE-2017-10661}
    - [netdrv] bnx2x: disable GSO where gso_size is too big for hardware (Jonathan Toppins) [1546760]     {CVE-2018-1000026}
    - [net] create skb_gso_validate_mac_len() (Jonathan Toppins) [1546760] {CVE-2018-1000026}
    - [fs] aio: properly check iovec sizes (Jeff Moyer) [1337518] {CVE-2015-8830}
    - [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner)     [1609759] {CVE-2018-10883}
    - [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609759]     {CVE-2018-10883}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the 'jessie-backports' suite.

There is no need to upgrade systems using Linux 3.16, as that kernel version will also continue to be supported in the LTS period.

This backport does not include the following binary packages :

hyperv-daemons libcpupower1 libcpupower-dev libusbip-dev linux-compiler-gcc-4.9-x86 linux-cpupower linux-libc-dev usbip

Older versions of most of those are built from other source packages in Debian 8.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

CVE-2017-5753

Further instances of code that was vulnerable to Spectre variant 1 (bounds-check bypass) have been mitigated.

CVE-2017-18255

It was discovered that the performance events subsystem did not properly validate the value of the kernel.perf_cpu_time_max_percent sysctl. Setting a large value could have an unspecified security impact. However, only a privileged user can set this sysctl.

CVE-2018-1118

The syzbot software found that the vhost driver did not initialise message buffers which would later be read by user processes. A user with access to the /dev/vhost-net device could use this to read sensitive information from the kernel or other users' processes.

CVE-2018-1120

Qualys reported that a user able to mount FUSE filesystems can create a process such that when another process attempting to read its command line will be blocked for an arbitrarily long time. This could be used for denial of service, or to aid in exploiting a race condition in the other program.

CVE-2018-1130

The syzbot software found that the DCCP implementation of sendmsg() does not check the socket state, potentially leading to a NULL pointer dereference. A local user could use this to cause a denial of service (crash). 

CVE-2018-3639

Multiple researchers have discovered that Speculative Store Bypass (SSB), a feature implemented in many processors, could be used to read sensitive information from another context. In particular, code in a software sandbox may be able to read sensitive information from outside the sandbox. This issue is also known as Spectre variant 4.

This update allows the issue to be mitigated on some x86 processors by disabling SSB. This requires an update to the processor's microcode, which is non-free. It may be included in an update to the system BIOS or UEFI firmware, or in a future update to the intel-microcode or amd64-microcode packages.

Disabling SSB can reduce performance significantly, so by default it is only done in tasks that use the seccomp feature. Applications that require this mitigation should request it explicitly through the prctl() system call. Users can control where the mitigation is enabled with the spec_store_bypass_disable kernel parameter.

CVE-2018-5814

Jakub Jirasek reported race conditions in the USB/IP host driver. A malicious client could use this to cause a denial of service (crash or memory corruption), and possibly to execute code, on a USB/IP server.

CVE-2018-10021

A physically present attacker who unplugs a SAS cable can cause a denial of service (memory leak and WARN).

CVE-2018-10087, CVE-2018-10124

zhongjiang found that the wait4() and kill() system call implementations did not check for the invalid pid value of INT_MIN. If a user passed this value, the behaviour of the code was formally undefined and might have had a security impact.

CVE-2018-10853

Andy Lutomirski and Mika Penttil&auml; reported that KVM for x86 processors did not perform a necessary privilege check when emulating certain instructions. This could be used by an unprivileged user in a guest VM to escalate their privileges within the guest.

CVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879, CVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883

Wen Xu at SSLab, Gatech, reported that crafted ext4 filesystem images could trigger a crash or memory corruption. A local user able to mount arbitrary filesystems, or an attacker providing filesystems to be mounted, could use this for denial of service or possibly for privilege escalation.

CVE-2018-10940

Dan Carpenter reported that the optical disc driver (cdrom) does not correctly validate the parameter to the CDROM_MEDIA_CHANGED ioctl. A user with access to a cdrom device could use this to cause a denial of service (crash).

CVE-2018-11506

Piotr Gabriel Kosinski and Daniel Shapira reported that the SCSI optical disc driver (sr) did not allocate a sufficiently large buffer for sense data. A user with access to a SCSI optical disc device that can produce more than 64 bytes of sense data could use this to cause a denial of service (crash or memory corruption), and possibly for privilege escalation.

CVE-2018-12233

Shankara Pailoor reported that a crafted JFS filesystem image could trigger a denial of service (memory corruption). This could possibly also be used for privilege escalation.

CVE-2018-1000204

The syzbot software found that the SCSI generic driver (sg) would in some circumstances allow reading data from uninitialised buffers, which could include sensitive information from the kernel or other tasks. However, only privileged users with the CAP_SYS_ADMIN or CAP_SYS_RAWIO capability were allowed to do this, so this has little or no security impact.

For Debian 8 'Jessie', these problems have been fixed in version 4.9.110-1~deb8u1. This update additionally fixes Debian bugs #860900, #872907, #892057, #896775, #897590, and #898137; and includes many more bug fixes from stable updates 4.9.89-4.9.110 inclusive.

We recommend that you upgrade your linux-4.9 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New kernel packages are available for Slackware 14.2 to fix security issues.

A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks). (CVE-2018-1120)

Impact

An attacker with local access may be able to cause a Denial of Service (DoS).

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks.(CVE-2018-3639)

By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).(CVE-2018-1120)

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions past bounds check. The flaw relies on the presence of a precisely-defined instruction sequence in the privileged code and the fact that memory writes occur to an address which depends on the untrusted value. Such writes cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to influence speculative execution and/or read privileged memory by conducting targeted cache side-channel attacks.(CVE-2018-3693)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerability :

  - By mmap()ing a FUSE-backed file onto a process's memory     containing command line arguments (or environment     strings), an attacker can cause utilities from psutils     or procps (such as ps, w) or any other program which     makes a read() call to the /proc/<pid>/cmdline (or     /proc/<pid>/environ) files to block indefinitely     (denial of service) or for some controlled time (as a     synchronization primitive for other attacks).

Note that Tenable Network Security has extracted the preceding description block directly from the Virtuozzo security advisory.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3752-2 advisory.

    USN-3752-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu     16.04 LTS.

    It was discovered that, when attempting to handle an out-of-memory situation, a null pointer dereference     could be triggered in the Linux kernel in some circumstances. A local attacker could use this to cause a     denial of service (system crash). (CVE-2018-1000200)

    Wen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly validate     meta-data information. An attacker could use this to construct a malicious xfs image that, when mounted,     could cause a denial of service (system crash). (CVE-2018-10323)

    Wen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly validate     xattr information. An attacker could use this to construct a malicious xfs image that, when mounted, could     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10840)

    Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep meta-     data information consistent in some situations. An attacker could use this to construct a malicious ext4     image that, when mounted, could cause a denial of service (system crash). (CVE-2018-10881)

    Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle     corrupted meta data in some situations. An attacker could use this to specially craft an ext4 filesystem     that caused a denial of service (system crash) when mounted. (CVE-2018-1093)

    Jann Horn discovered that the Linux kernel's implementation of random seed data reported that it was in a     ready state before it had gathered sufficient entropy. An attacker could use this to expose sensitive     information. (CVE-2018-1108)

    It was discovered that the procfs filesystem did not properly handle processes mapping some memory     elements onto files. A local attacker could use this to block utilities that examine the procfs filesystem     to report operating system state, such as ps(1). (CVE-2018-1120)

    Jann Horn discovered that the ext4 filesystem implementation in the Linux kernel did not properly keep     xattr information consistent in some situations. An attacker could use this to construct a malicious ext4     image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary     code. (CVE-2018-11412)

    Piotr Gabriel Kosinski and Daniel Shapira discovered a stack-based buffer overflow in the CDROM driver     implementation of the Linux kernel. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2018-11506)

    Shankara Pailoor discovered that a race condition existed in the socket handling code in the Linux kernel.
    A local attacker could use this to cause a denial of service (system crash). (CVE-2018-12232)

    Shankara Pailoor discovered that the JFS filesystem implementation in the Linux kernel contained a buffer     overflow when handling extended attributes. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2018-12233)

    Felix Wilhelm discovered that the KVM implementation in the Linux kernel did not properly perform     permission checks in some situations when nested virtualization is used. An attacker in a guest VM could     possibly use this to escape into an outer VM or the host OS. (CVE-2018-12904)

    Wen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly handle an     error condition with a corrupted xfs image. An attacker could use this to construct a malicious xfs image     that, when mounted, could cause a denial of service (system crash). (CVE-2018-13094)

    It was discovered that the Linux kernel did not properly handle setgid file creation when performed by a     non-member of the group. A local attacker could use this to gain elevated privileges. (CVE-2018-13405)

    Silvio Cesare discovered that the generic VESA frame buffer driver in the Linux kernel contained an     integer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-13406)

    Jakub Jirasek discovered that multiple use-after-free errors existed in the USB/IP implementation in the     Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-5814)

    It was discovered that a race condition existed in the ARM Advanced Microcontroller Bus Architecture     (AMBA) driver in the Linux kernel that could result in a double free. A local attacker could use this to     cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-9415)

    It was discovered that an information leak existed in the generic SCSI driver in the Linux kernel. A local     attacker could use this to expose sensitive information (kernel memory). (CVE-2018-1000204)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The v4.16.10 update contains important fixes across the tree

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
222149	Linux Distros 未修补的漏洞: CVE-2018-1120	Nessus	Misc.	2025/3/4	2025/8/8	medium
122892	Ubuntu 16.04 LTS：Linux 内核漏洞 (USN-3910-1)	Nessus	Ubuntu Local Security Checks	2019/3/18	2025/3/20	medium
122893	Ubuntu 14.04 LTS：Linux 内核 (Xenial HWE) 漏洞 (USN-3910-2)	Nessus	Ubuntu Local Security Checks	2019/3/18	2025/3/20	medium
118525	RHEL 7：内核 (RHSA-2018:3083)	Nessus	Red Hat Local Security Checks	2018/10/31	2025/3/16	high
118770	Oracle Linux 7 : kernel (ELSA-2018-3083)	Nessus	Oracle Linux Local Security Checks	2018/11/7	2024/10/24	high
111165	Debian DLA-1423-1 : linux-4.9 new package (Spectre)	Nessus	Debian Local Security Checks	2018/7/20	2024/9/4	high
121505	Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-030-01)	Nessus	Slackware Local Security Checks	2019/1/31	2024/6/25	high
150194	F5 Networks BIG-IP : Linux kernel vulnerability (K42202505)	Nessus	F5 Networks Local Security Checks	2021/6/3	2025/2/20	medium
110455	Amazon Linux 2 : kernel (ALAS-2018-1038) (Spectre)	Nessus	Amazon Linux Local Security Checks	2018/6/12	2024/9/24	medium
111104	Virtuozzo 7 : readykernel-patch (VZA-2018-046)	Nessus	Virtuozzo Local Security Checks	2018/7/16	2025/3/27	medium
112110	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3752-2)	Nessus	Ubuntu Local Security Checks	2018/8/24	2024/8/27	high
120599	Fedora 28 : kernel (2018-8ce90c8b24)	Nessus	Fedora Local Security Checks	2019/1/3	2025/3/21	medium

検出

プラグインの検索

medium

medium

medium

high

high

high

high

medium

medium

medium

high

medium