Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash).
(CVE-2016-10147)

It was discovered that a use-after-free existed in the KVM susbsystem of the Linux kernel when creating devices. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10150)

Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information.
(CVE-2016-8399)

Qian Zhang discovered a heap-based buffer overflow in the tipc_msg_build() function in the Linux kernel. A local attacker could use to cause a denial of service (system crash) or possible execute arbitrary code with administrative privileges. (CVE-2016-8632)

Dmitry Vyukov discovered that the KVM implementation in the Linux kernel did not properly restrict the VCPU index when I/O APIC is enabled, An attacker in a guest VM could use this to cause a denial of service (system crash) or possibly gain privileges in the host OS.
(CVE-2016-9777).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

しないMikulas Patocka氏によって、Linuxカーネルの非同期マルチバッファ暗号デーモン（mcryptd）が、互換性のないアルゴリズムによる呼び出しを適切に処理しないことがわかりました。ローカルの攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こす可能性があります。（CVE-2016-10147）デバイスの作成時、LinuxカーネルのKVMサブシステムにメモリ解放後使用（use-after-free）が発生することがわかりました。ローカルの攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こす可能性があります。（CVE-2016-10150）LinuxカーネルのICMP実装でICMPヘッダーのサイズが適切にチェックされないことをQidan He氏が発見しました。CAP_NET_ADMINのあるローカルの攻撃者がこれを悪用して、秘密情報を漏えいさせる可能性があります。（CVE-2016-8399）Qian Zhang氏によって、Linuxカーネルのtipc_msg_build()数でヒープベースのバッファオーバーフローが発見されました。ローカルの攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こしたり、管理者権限で任意のコードを実行したりする可能性があります。（CVE-2016-8632）I/O APICが有効になっているとき、LinuxカーネルのKVM実装でVCPUインデックスが適切に制限されないことをDmitry Vyukov氏が発見しました。ゲストVMの攻撃者がこれを悪用してサービス拒否（システムクラッシュ）を引き起こしたり、ホストOSで権限を取得したりする可能性があります。（CVE-2016-9777）注意：Tenable Network Securityは、前述の説明ブロックをUbuntuセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

Mikulas Patocka 发现 Linux 内核的异步多缓冲区密码守护程序 (mcryptd) 未能正确处理不兼容运算的调用。本地攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-10147) 发现 Linux 内核的 KVM 子系统在创建设备时存在释放后使用漏洞。本地攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2016-10150) Qidan He 发现 Linux 内核的 ICMP 实施未能正确检查 ICMP 标头尺寸。具有 CAP_NET_ADMIN 的本地攻击者可利用此问题暴露敏感信息。(CVE-2016-8399) Qian Zhang 发现 Linux 内核中的 tipc_msg_build() 函数存在基于堆栈的缓冲区溢出。本地攻击者可以利用这一问题造成拒绝服务（系统崩溃），或以管理权限执行任意代码。(CVE-2016-8632) Dmitry Vyukov 发现 Linux 内核中的 KVM 实施在启用 I/O APIC 时未能正确限制 VCPU 索引，客户机 VM 中的攻击者可利用此问题导致拒绝服务（系统崩溃）或可能取得主机操作系统的权限。(CVE-2016-9777)。请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

Mikulas Patocka 發現 Linux 核心中的非同步多重緩衝區密碼編譯程序 (mcryptd) 在被不相容的演算法叫用時，未正確處理。本機攻擊者可利用此缺陷造成拒絕服務 (系統當機)。(CVE-2016-10147) 據發現，Linux 核心中的 KVM 子系統在建立裝置時存在釋放後使用。本機攻擊者可利用此缺陷造成拒絕服務 (系統當機)。(CVE-2016-10150) Qidan He 發現 Linux 核心中的 ICMP 實作未正確檢查 ICMP 標頭的大小。具 CAP_NET_ADMIN 的本機攻擊者可利用此弱點洩漏敏感資訊。(CVE-2016-8399) Qian Zhang 發現 Linux 核心中的 tipc_msg_build() 函式發生堆積型緩衝區溢位。本機攻擊者可惡意利用此缺陷，進而引發拒絕服務 (系統當機)，或可能以系統管理權限執行任意程式碼。(CVE-2016-8632) Dmitry Vyukov 發現當啟用 I/O APIC 時，Linux 核心中的 KVM 實作未正確限制 VCPU 索引。來賓 VM 中的攻擊者可利用此弱點造成拒絕服務 (系統當機) 或可能取得主機作業系統的權限。(CVE-2016-9777)。請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The snd_msndmidi_input_read function in     sound/isa/msnd/msnd_midi.c in the Linux kernel through     4.11.7 allows local users to cause a denial of service     (over-boundary access) or possibly have unspecified     other impact by changing the value of a message queue     head pointer between two kernel reads of that value,     aka a 'double fetch' vulnerability.(CVE-2017-9985i1/4%0

  - An assertion failure issue was found in the Linux     kernel's KVM hypervisor module built to support     visualization on ARM64 architecture platforms. The     failure could occur while accessing Performance     Monitors Cycle Count Register (PMCCNTR) from a guest. A     privileged guest user could use this flaw to crash the     host kernel resulting in denial of     service.(CVE-2017-12168i1/4%0

  - The iscsi_if_rx() function in     'drivers/scsi/scsi_transport_iscsi.c' in the Linux     kernel from v2.6.24-rc1 through 4.13.2 allows local     users to cause a denial of service (a system panic) by     making a number of certain syscalls by leveraging     incorrect length validation in the kernel     code.(CVE-2017-14489i1/4%0

  - The hdpvr_probe function in     drivers/media/usb/hdpvr/hdpvr-core.c in the Linux     kernel through 4.13.11 allows local users to cause a     denial of service (improper error handling and system     crash) or possibly have unspecified other impact via a     crafted USB device.(CVE-2017-16644i1/4%0

  - The dvb frontend management subsystem in the Linux     kernel contains a use-after-free which can allow a     malicious user to write to memory that may be assigned     to another kernel structure. This could create memory     corruption, panic, or possibly other side     affects.(CVE-2017-16648i1/4%0

  - It was found that the Linux kernel's IPv6     implementation mishandled socket options. A local     attacker could abuse concurrent access to the socket     options to escalate their privileges, or cause a denial     of service (use-after-free and system crash) via a     crafted sendmsg system call.(CVE-2016-3841i1/4%0

  - A flaw was found in the Linux kernel's ext4 filesystem.
    A local user can cause a use-after-free in     ext4_xattr_set_entry function and a denial of service     or unspecified other impact may occur by renaming a     file in a crafted ext4 filesystem     image.(CVE-2018-10879i1/4%0

  - A race condition was found in the Linux kernel, present     since v3.14-rc1 through v4.12. The race happens between     threads of inotify_handle_event() and vfs_rename()     while running the rename operation against the same     file. As a result of the race the next slab data or the     slab's free list pointer can be corrupted with     attacker-controlled data, which may lead to the     privilege escalation.(CVE-2017-7533i1/4%0

  - A privilege-escalation vulnerability was discovered in     the Linux kernel built with User Namespace     (CONFIG_USER_NS) support. The flaw occurred when the     ptrace() system call was used on a root-owned process     to enter a user namespace. A privileged namespace user     could exploit this flaw to potentially escalate their     privileges on the system, outside the original     namespace.(CVE-2015-8709i1/4%0

  - Use-after-free vulnerability in     drivers/net/ppp/ppp_generic.c in the Linux kernel     before 4.5.2 allows local users to cause a denial of     service (memory corruption and system crash, or     spinlock) or possibly have unspecified other impact by     removing a network namespace, related to the     ppp_register_net_channel and ppp_unregister_channel     functions.(CVE-2016-4805i1/4%0

  - A flaw was found in the way the Linux kernel's     kvm_iommu_map_pages() function handled IOMMU mapping     failures. A privileged user in a guest with an assigned     host device could use this flaw to crash the     host.(CVE-2014-3601i1/4%0

  - A flaw was found in the Linux kernel's implementation     of associative arrays introduced in 3.13. This     functionality was backported to the 3.10 kernels in Red     Hat Enterprise Linux 7. The flaw involved a null     pointer dereference in assoc_array_apply_edit() due to     incorrect node-splitting in assoc_array implementation.
    This affects the keyring key type and thus key addition     and link creation operations may cause the kernel to     panic.(CVE-2017-12193i1/4%0

  - Multiple race conditions in drivers/char/adsprpc.c and     drivers/char/adsprpc_compat.c in the ADSPRPC driver for     the Linux kernel 3.x, as used in Qualcomm Innovation     Center (QuIC) Android contributions for MSM devices and     other products, allow attackers to cause a denial of     service (zero-value write) or possibly have unspecified     other impact via a COMPAT_FASTRPC_IOCTL_INVOKE_FD ioctl     call.(CVE-2015-0572i1/4%0

  - The sanity_check_ckpt function in fs/f2fs/super.c in     the Linux kernel before version 4.12.4 does not     validate the blkoff and segno arrays. This allows an     unprivileged, local user to cause a system panic and     DoS. Due to the nature of the flaw, privilege     escalation cannot be fully ruled out, although we     believe it is unlikely.(CVE-2017-10663i1/4%0

  - A stack overflow flaw caused by infinite recursion was     found in the way the Linux kernel's Universal Disk     Format (UDF) file system implementation processed     indirect Information Control Blocks (ICBs). An attacker     with physical access to the system could use a     specially crafted UDF image to crash the     system.(CVE-2014-6410i1/4%0

  - Race condition in the ion_ioctl function in     drivers/staging/android/ion/ion.c in the Linux kernel     before 4.6 allows local users to gain privileges or     cause a denial of service (use-after-free) by calling     ION_IOC_FREE on two CPUs at the same     time.(CVE-2016-9120i1/4%0

  - drivers/hid/hid-picolcd_core.c in the Human Interface     Device (HID) subsystem in the Linux kernel through     3.11, when CONFIG_HID_PICOLCD is enabled, allows     physically proximate attackers to cause a denial of     service (NULL pointer dereference and OOPS) via a     crafted device.(CVE-2013-2899i1/4%0

  - A flaw was found in the Linux kernel's implementation     of overlayfs. An attacker can leak file resources in     the system by opening a large file with write     permissions on a overlay filesystem that is     insufficient to deal with the size of the write.When     unmounting the underlying device, the system is unable     to free an inode and this will consume resources.
    Repeating this for all available inodes and memory will     create a denial of service situation.(CVE-2015-8953i1/4%0

  - Buffer overflow in the mp_override_legacy_irq()     function in arch/x86/kernel/acpi/boot.c in the Linux     kernel through 4.12.2 allows local users to gain     privileges via a crafted ACPI table.(CVE-2017-11473i1/4%0

  - Use-after-free vulnerability in the     kvm_ioctl_create_device function in virt/kvm/kvm_main.c     in the Linux kernel before 4.8.13 allows host OS users     to cause a denial of service (host OS crash) or     possibly gain privileges via crafted ioctl calls on the     /dev/kvm device.(CVE-2016-10150i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
97098	Ubuntu 16.10 : linux-raspi2 vulnerabilities (USN-3190-2)	Nessus	Ubuntu Local Security Checks	2017/2/10	2023/1/12	critical
97018	Ubuntu 16.10：Linuxの脆弱性（USN-3190-1）	Nessus	Ubuntu Local Security Checks	2017/2/6	2023/1/12	critical
97098	Ubuntu 16.10：linux-raspi2 漏洞 (USN-3190-2)	Nessus	Ubuntu Local Security Checks	2017/2/10	2023/1/12	critical
97098	Ubuntu 16.10：linux-raspi2 弱點 (USN-3190-2)	Nessus	Ubuntu Local Security Checks	2017/2/10	2023/1/12	critical
97018	Ubuntu 16.10 : linux vulnerabilities (USN-3190-1)	Nessus	Ubuntu Local Security Checks	2017/2/6	2023/1/12	critical
124976	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1523)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/22	critical
97018	Ubuntu 16.10：linux 漏洞 (USN-3190-1)	Nessus	Ubuntu Local Security Checks	2017/2/6	2023/1/12	critical
97018	Ubuntu 16.10：linux 弱點 (USN-3190-1)	Nessus	Ubuntu Local Security Checks	2017/2/6	2023/1/12	critical
97098	Ubuntu 16.10：linux-raspi2の脆弱性（USN-3190-2）	Nessus	Ubuntu Local Security Checks	2017/2/10	2023/1/12	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical