According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The kernel package contains the Linux kernel (vmlinuz),     the core of any Linux operating system. The kernel     handles the basic functions of the operating system:
    memory allocation, process allocation, device input and     output, etc.Security Fix(es):Heap-based buffer overflow     in the udf_load_logicalvol function in fs/udf/super.c     in the Linux kernel before 3.4.5 allows remote     attackers to cause a denial of service (system crash)     or possibly have unspecified other impact via a crafted     UDF filesystem.(CVE-2012-3400)The     mmc_ioctl_cdrom_read_data function in     drivers/cdrom/cdrom.c in the Linux kernel through 3.10     allows local users to obtain sensitive information from     kernel memory via a read operation on a malfunctioning     CD-ROM drive.(CVE-2013-2164)The     sctp_sf_do_5_2_4_dupcook function in     net/sctp/sm_statefuns.c in the SCTP implementation in     the Linux kernel before 3.8.5 does not properly handle     associations during the processing of a duplicate     COOKIE ECHO chunk, which allows remote attackers to     cause a denial of service (NULL pointer dereference and     system crash) or possibly have unspecified other impact     via crafted SCTP traffic.(CVE-2013-2206)The (1)     get_user and (2) put_user API functions in the Linux     kernel before 3.5.5 on the v6k and v7 ARM platforms do     not validate certain addresses, which allows attackers     to read or modify the contents of arbitrary kernel     memory locations via a crafted application, as     exploited in the wild against Android devices in     October and November 2013.(CVE-2013-6282)An issue was     discovered in the Linux kernel before 4.20. There is a     race condition in smp_task_timedout() and     smp_task_done() in drivers/scsi/libsas/sas_expander.c,     leading to a use-after-free.(CVE-2018-20836)The Siemens     R3964 line discipline driver in drivers/tty/n_r3964.c     in the Linux kernel before 5.0.8 has multiple race     conditions.(CVE-2019-11486)The Linux kernel before     5.1-rc5 allows page->_refcount reference count     overflow, with resultant use-after-free issues, if     about 140 GiB of RAM exists. This is related to     fs/fuse/dev.c, fs/pipe.c, fs/splice.c,     include/linux/mm.h, include/linux/pipe_fs_i.h,     kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It     can occur with FUSE requests.(CVE-2019-11487)The     coredump implementation in the Linux kernel before     5.0.10 does not use locking or other mechanisms to     prevent vma layout or vma flags changes while it runs,     which allows local users to obtain sensitive     information, cause a denial of service, or possibly     have unspecified other impact by triggering a race     condition with mmget_not_zero or get_task_mm calls.
    This is related to fs/userfaultfd.c, mm/mmap.c,     fs/proc/task_mmu.c, and     drivers/infiniband/core/uverbs_main.c.(CVE-2019-11599)A     n issue was discovered in the Linux kernel before     5.0.7. A NULL pointer dereference can occur when     megasas_create_frame_pool() fails in     megasas_alloc_cmds() in     drivers/scsi/megaraid/megaraid_sas_base.c. This causes     a Denial of Service, related to a     use-after-free.(CVE-2019-11810)An issue was discovered     in the Linux kernel before 5.0.4. There is a     use-after-free upon attempted read access to     /proc/ioports after the ipmi_si module is removed,     related to drivers/char/ipmi/ipmi_si_intf.c,     drivers/char/ipmi/ipmi_si_mem_io.c, and     drivers/char/ipmi/ipmi_si_port_io.c.(CVE-2019-11811)A     flaw was found in the Linux kernel's handle_rx()     function in the [vhost_net] driver. A malicious virtual     guest, under specific conditions, can trigger an     out-of-bounds write in a kmalloc-8 slab on a virtual     host which may lead to a kernel memory corruption and a     system panic. Due to the nature of the flaw, privilege     escalation cannot be fully ruled out. Versions from     v4.16 and newer are vulnerable.(CVE-2018-16880)An issue     was discovered in rds_tcp_kill_sock in net/rds/tcp.c in     the Linux kernel before 5.0.8. There is a race     condition leading to a use-after-free, related to net     namespace cleanup.(CVE-2019-11815)A flaw was found in     the Linux kernel in the function     hid_debug_events_read() in drivers/hid/hid-debug.c file     which may enter an infinite loop with certain     parameters passed from a userspace. A local privileged     user ('root') can cause a system lock up and a denial     of service. Versions from v4.18 and newer are     vulnerable.(CVE-2019-3819)A flaw was found in the Linux     kernel's vfio interface implementation that permits     violation of the user's locked memory limit. If a     device is bound to a vfio driver, such as vfio-pci, and     the local attacker is administratively granted     ownership of the device, it may cause a system memory     exhaustion and thus a denial of service (DoS). Versions     3.10, 4.14 and 4.18 are vulnerable.(CVE-2019-3882)An     infinite loop issue was found in the vhost_net kernel     module in Linux Kernel up to and including v5.1-rc6,     while handling incoming packets in handle_rx(). It     could occur if one end sends packets faster than the     other end can process them. A guest user, maybe remote     one, could use this flaw to stall the vhost_net kernel     thread, resulting in a DoS scenario.(CVE-2019-3900)In     the Linux Kernel before versions 4.20.8 and 4.19.21 a     use-after-free error in the 'sctp_sendmsg()' function     (net/sctp/socket.c) when handling SCTP_SENDALL flag can     be exploited to corrupt memory.(CVE-2019-8956)A flaw     was found in the Linux kernel's implementation of ext4     extent management. The kernel doesn't correctly     initialize memory regions in the extent tree block     which may be exported to a local user to obtain     sensitive information by reading empty/uninitialized     data from the filesystem.(CVE-2019-11833)An issue was     discovered in drm_load_edid_firmware in     drivers/gpu/drm/drm_edid_load.c in the Linux kernel     through 5.1.5. There is an unchecked kstrdup of fwstr,     which might allow an attacker to cause a denial of     service (NULL pointer dereference and system crash).
    NOTE: The vendor disputes this issues as not being a     vulnerability because kstrdup() returning NULL is     handled sufficiently and there is no chance for a NULL     pointer dereference.(CVE-2019-12382)An issue was     discovered in the efi subsystem in the Linux kernel     through 5.1.5. phys_efi_set_virtual_address_map in     arch/x86/platform/efi/efi.c and efi_call_phys_prolog in     arch/x86/platform/efi/efi_64.c mishandle memory     allocation failures. NOTE: This id is disputed as not     being an issue because ?All the code touched by the     referenced commit runs only at boot, before any user     processes are started. Therefore, there is no     possibility for an unprivileged user to control     it.(CVE-2019-12380)An issue was discovered in the Linux     kernel before 5.2.3. An out of bounds access exists in     the function hclge_tm_schd_mode_vnet_base_cfg in the     file drivers     et/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c.(CVE-2019-     15925)An issue was discovered in     dlpar_parse_cc_property in     arch/powerpc/platforms/pseries/dlpar.c in the Linux     kernel through 5.1.6. There is an unchecked kstrdup of     prop-i1/4zname, which might allow an attacker to cause a     denial of service (NULL pointer dereference and system     crash).(CVE-2019-12614)An issue was discovered in     net/ipv4/sysctl_net_ipv4.c in the Linux kernel before     5.0.11. There is a net/ipv4/tcp_input.c signed integer     overflow in tcp_ack_update_rtt() when userspace writes     a very large integer to     /proc/syset/ipv4/tcp_min_rtt_wlen, leading to a denial     of service or possibly unspecified other impact, aka     CID-19fad20d15a6.(CVE-2019-18805)A flaw was found in     the way PTRACE_TRACEME functionality was handled in the     Linux kernel. The kernel's implementation of ptrace can     inadvertently grant elevated permissions to an attacker     who can then abuse the relationship between the tracer     and the process being traced. This flaw could allow a     local, unprivileged user to increase their privileges     on the system or cause a denial of     service.(CVE-2019-13272)An issue was discovered in     ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux     kernel through 5.1.5. There is an unchecked kmalloc of     new_ra, which might allow an attacker to cause a denial     of service (NULL pointer dereference and system crash).
    NOTE: This has been disputed as not an     issue.(CVE-2019-12378)An issue was discovered in     ip_ra_control in net/ipv4/ip_sockglue.c in the Linux     kernel through 5.1.5. There is an unchecked kmalloc of     new_ra, which might allow an attacker to cause a denial     of service (NULL pointer dereference and system crash).
    NOTE: this is disputed because new_ra is never used if     it is NULL.(CVE-2019-12381)An issue was discovered in     sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c     in the Linux kernel through 5.1.5. There is an     unchecked kstrndup of derived_name, which might allow     an attacker to cause a denial of service (NULL pointer     dereference and system crash). NOTE: This id is     disputed as not being an issue because 'The memory     allocation that was not checked is part of a code that     only runs at boot time, before user processes are     started. Therefore, there is no possibility for an     unprivileged user to control it, and no denial of     service.'.(CVE-2019-12455)An issue was discovered in     the MPT3COMMAND case in _ctl_ioctl_main in     drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel     through 5.1.5. It allows local users to cause a denial     of service or possibly have unspecified other impact by     changing the value of ioc_number between two kernel     reads of that value, aka a ''double fetch''     vulnerability. NOTE: a third party reports that this is     unexploitable because the doubly fetched value is not     used.(CVE-2019-12456)An issue was discovered in     get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in     the Linux kernel through 5.1.6. There is an unchecked     kstrdup_const of node_info-i1/4zvdev_port.name, which     might allow an attacker to cause a denial of service     (NULL pointer dereference and system     crash).(CVE-2019-12615)In parse_hid_report_descriptor     in drivers/input/tablet/gtco.c in the Linux kernel     through 5.2.1, a malicious USB device can send an HID     report that triggers an out-of-bounds write during     generation of debugging messages.(CVE-2019-13631)A     vulnerability was found in the Linux kernelaEURtms floppy     disk driver implementation. A local attacker with     access to the floppy device could call set_geometry in     drivers/block/floppy.c, which does not validate the     sect and head fields, causing an integer overflow and     out-of-bounds read. This flaw may crash the system or     allow an attacker to gather information causing     subsequent successful     attacks.(CVE-2019-14283)check_input_term in     sound/usb/mixer.c in the Linux kernel through 5.2.9     mishandles recursion, leading to kernel stack     exhaustion.(CVE-2019-15118)An issue was discovered in     the Linux kernel before 5.2.6. There is a     use-after-free caused by a malicious USB device in the     drivers/media/v4l2-core/v4l2-dev.c driver because     drivers/media/radio/radio-raremono.c does not properly     allocate memory.(CVE-2019-15211)An issue was discovered     in the Linux kernel before 5.0.10. There is a     use-after-free in the sound subsystem because card     disconnection causes certain data structures to be     deleted too early. This is related to sound/core/init.c     and sound/core/info.c.(CVE-2019-15214)An issue was     discovered in the Linux kernel before 5.1.8. There is a     NULL pointer dereference caused by a malicious USB     device in the drivers/media/usb/siano/smsusb.c     driver.(CVE-2019-15218)An issue was discovered in the     Linux kernel before 5.1.8. There is a NULL pointer     dereference caused by a malicious USB device in the     drivers/usb/misc/sisusbvga/sisusb.c     driver.(CVE-2019-15219)An issue was discovered in the     Linux kernel before 5.2.1. There is a use-after-free     caused by a malicious USB device in the     driverset/wireless/intersil/p54/p54usb.c     driver.(CVE-2019-15220)An issue was discovered in the     Linux kernel before 5.1.17. There is a NULL pointer     dereference caused by a malicious USB device in the     sound/usb/line6/pcm.c driver.(CVE-2019-15221)An issue     was discovered in the Linux kernel before 5.0.9. There     is a use-after-free in atalk_proc_exit, related to     net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and     net/appletalk/sysctl_net_atalk.c.(CVE-2019-15292)An     issue was discovered in xfs_setattr_nonsize in     fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9.
    XFS partially wedges when a chgrp fails on account of     being out of disk quota. xfs_setattr_nonsize is failing     to unlock the ILOCK after the xfs_qm_vop_chown_reserve     call fails. This is primarily a local DoS attack     vector, but it might result as well in remote DoS if     the XFS filesystem is exported for instance via     NFS.(CVE-2019-15538)An issue was discovered in the     Linux kernel before 5.0.19. There is an out-of-bounds     array access in __xfrm_policy_unlink, which will cause     denial of service, because verify_newpolicy_info in     net/xfrm/xfrm_user.c mishandles directory     validation.(CVE-2019-15666)In the Linux kernel before     5.1.13, there is a memory leak in     drivers/scsi/libsas/sas_expander.c when SAS expander     discovery fails. This will cause a BUG and denial of     service.(CVE-2019-15807)An issue was discovered in the     Linux kernel before 5.0.5. There is a use-after-free     issue when hci_uart_register_dev() fails in     hci_uart_set_proto() in     drivers/bluetooth/hci_ldisc.c.(CVE-2019-15917)An issue     was discovered in the Linux kernel before 5.0.10.
    SMB2_write in fs/cifs/smb2pdu.c has a     use-after-free.(CVE-2019-15919)An issue was discovered     in the Linux kernel before 5.0.10. SMB2_read in     fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was     not fixed correctly in 5.0.10 see the 5.0.11 ChangeLog,     which documents a memory leak.(CVE-2019-15920)An issue     was discovered in the Linux kernel before 5.0.4. The 9p     filesystem did not protect i_size_write() properly,     which causes an i_size_read() infinite loop and denial     of service on SMP systems.(CVE-2019-16413)An issue was     discovered in can_can_gw_rcv in net/can/gw.c in the     Linux kernel through 4.19.13. The CAN frame     modification rules allow bitwise logical operations     that can be also applied to the can_dlc field. Because     of a missing check, the CAN drivers may write arbitrary     content beyond the data registers in the CAN     controller's I/O memory when processing can-gw     manipulated outgoing frames. This is related to     cgw_csum_xor_rel. An unprivileged user can trigger a     system crash (general protection     fault).(CVE-2019-3701)A flaw was found in the Linux     kernel's Marvell wifi chip driver. A heap overflow in     mwifiex_update_bss_desc_with_ie function in     marvell/mwifiex/scan.c allows remote attackers to cause     a denial of service(system crash) or execute arbitrary     code.(CVE-2019-3846)A new software page cache side     channel attack scenario was discovered in operating     systems that implement the very common 'page cache'     caching mechanism. A malicious user/process could use     'in memory' page-cache knowledge to infer access     timings to shared memory and gain knowledge which can     be used to reduce effectiveness of cryptographic     strength by monitoring algorithmic behavior, infer     access patterns of memory to determine code paths     taken, and exfiltrate data to a blinded attacker     through page-granularity access times as a     side-channel.(CVE-2019-5489)In the Android kernel in     the video driver there is a kernel pointer leak due to     a WARN_ON statement. This could lead to local     information disclosure with System execution privileges     needed. User interaction is not needed for     exploitation.(CVE-2019-9455)A vulnerability was found     in the arch/x86/lib/insn-eval.c function in the Linux     kernel. An attacker could corrupt the memory due to a     flaw in use-after-free access to an LDT entry caused by     a race condition between modify_ldt() and a #BR     exception for an MPX bounds violation.(CVE-2019-13233)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3930-2 advisory.

  - In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by     supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in     sound/usb/card.c. (CVE-2018-19824)

  - A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before     5.1-rc1. (CVE-2019-3459)

  - A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel     before 5.1-rc1. (CVE-2019-3460)

  - In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference     counting because of a race condition, leading to a use-after-free. (CVE-2019-6974)

  - The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. (CVE-2019-7221)

  - The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. (CVE-2019-7222)

  - kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on     pointer arithmetic in various cases, including cases of different branches with different state or limits     to sanitize, leading to side-channel attacks. (CVE-2019-7308)

  - In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for     a certain structure member, which leads to a use-after-free in sockfs_setattr. (CVE-2019-8912)

  - In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the sctp_sendmsg()     function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.
    (CVE-2019-8956)

  - A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows     attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
    (CVE-2019-8980)

  - In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-     free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a service     ipmievd restart loop. (CVE-2019-9003)

  - In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has     insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write     operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and     snmp_helper. (CVE-2019-9162)

  - In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum     address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP     platforms. This is related to a capability check for the wrong task. (CVE-2019-9213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Mathias Payer氏とHui Peng氏は、Advanced Linux Sound Architecture（ALSA）サブシステムにメモリ解放後使用（Use After Free）の脆弱性を発見しました。物理的に近接する攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こす可能性があります。（CVE-2018-19824）Shlomi Oberman氏、Yuli Shapiro氏、Ran Menscher氏は、LinuxカーネルのBluetooth実装に情報漏えいを発見しました。Bluetoothの通信範囲内の攻撃者がこれを悪用して、秘密情報（カーネルメモリ）を漏えいする可能性があります。（CVE-2019-3459、CVE-2019-3460）Jann Horn氏は、LinuxカーネルのKVM実装にメモリ解放後使用の脆弱性を発見しました。/dev/kvmにアクセスするゲストVMの攻撃者がこれを悪用して、サービス拒否（ゲストVMのクラッシュ）を引き起こす可能性があります。（CVE-2019-6974）Jim Mattson氏とFelix Wilhelm氏は、ネストされた仮想マシンを使用するとき、LinuxカーネルのKVMサブシステムにメモリ解放後使用の脆弱性を発見しました。ゲストVM内のローカルの攻撃者がこれを悪用し、サービス拒否（システムクラッシュ）を引き起こしたり、ホストシステムで任意のコードを実行したりする可能性があります。（CVE-2019-7221）Felix Wilhelm氏は、ネストされた仮想化が使用されるときに、LinuxカーネルのKVMサブシステムに情報漏えいの脆弱性を発見しました。ローカルの攻撃者がこれを悪用して、ホストのシステムメモリからゲストVMに秘密情報を漏えいする可能性があります。（CVE-2019-7222）Jann Horn氏は、LinuxカーネルのeBPF実装におけるSpectre V1攻撃に対する強化が不十分であることを発見しました。ローカルの攻撃者がこれを悪用して、秘密情報を漏えいさせる可能性があります。（CVE-2019-7308）Linuxカーネルの暗号実装（af_alg）のユーザー空間APIに、メモリ解放後使用（Use After Free）の脆弱性があることがわかりました。ローカルの攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こしたり、任意のコードを実行したりする可能性があります。（CVE-2019-8912）Jakub Jirasek氏は、LinuxカーネルのSCTP実装にメモリ解放後使用（Use After Free）の脆弱性を発見しました。ローカルの攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こしたり、任意のコードを実行したりする可能性があります。（CVE-2019-8956）ファイルの読み取り中に特定のエラーを処理するとき、Linuxカーネルがメモリを不適切に割り当て解除することがわかりました。ローカルの攻撃者がこれを悪用して、サービス拒否（過剰なメモリ消費）を​​引き起こす可能性があります。（CVE-2019-8980）LinuxカーネルのIPMI実装にメモリ解放後使用（Use After Free）の脆弱性があることがわかりました。IPMIキャラクタデバイスファイルへのアクセス権を持つローカルの攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こす可能性があります。（CVE-2019-9003）Jann Horn氏は、LinuxカーネルのSNMP NAT実装が実行するASN.1の長さチェックが不十分であることを発見しました。攻撃者がこれを悪用して、サービス拒否（システムクラッシュ）を引き起こしたり、任意のコードを実行したりする可能性があります。（CVE-2019-9162）Jann Horn氏は、Linuxカーネルのmmap実装では、mmapの最小アドレスを適切にチェックしない状況があることを発見しました。ローカルの攻撃者がこれを利用して、カーネルのNULLポインターデリファレンスの脆弱性の悪用を促す可能性があります。（CVE-2019-9213）注意：Tenable Network Securityは、前述の説明ブロックをUbuntuセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

リモートの Ubuntu 18.04 LTS ホストには、USN-3930-2のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  -4.19.6までのLinuxカーネルにおいて、ローカルユーザーが、sound/usb/card.cのusb_audio_probeで誤って処理される悪意のあるUSBサウンドデバイス（インターフェイスなし）を介して、ALSAドライバーのメモリ解放後使用（Use After Free）を悪用する可能性があります。（CVE-2018-19824）

  L2CAP_GET_CONF_OPT使用時のヒープアドレス情報の漏洩が、5.1-rc1より前のLinuxカーネルに見つかりました。(CVE-2019-3459)

  - 5.1-rc1 より前の Linux カーネルで、L2CAP_PARSE_CONF_RSP を含む複数の場所にヒープデータ情報漏洩が見つかりました。(CVE-2019-3460)

  -以前4.20.8のLinuxカーネルで、virt/kvm/kvm_main.c内のkvm_ioctl_create_deviceは、競合状態のために参照カウントを不適切に処理し、メモリ解放後使用（Use After Free）を引き起こします。（CVE-2019-6974）

  -4.20.5までのLinuxカーネルのKVM実装に、メモリ解放後使用（Use After Free）があります。（CVE-2019-7221）

  - 4.20.5 までの Linux カーネルの KVM 実装に、情報漏洩があります。(CVE-2019-7222)

  -4.20.6より前のLinuxカーネルにあるkernel/bpf/verifier.cのコードは、状態が異なるさまざまな分岐の場合やサニタイズする制限がある場合など、さまざまな状況でポインター計算に対して望ましくない領域外の投機を実行し、サイドチャネル攻撃を引き起こす可能性があります。（CVE-2019-7308）

  -4.20.11までのLinuxカーネルで、crypto af_alg.cのaf_alg_release()が、特定の構成メンバー用のNULL値の設定を無視するため、sockfs_setattrでメモリ解放後使用（Use After Free）が発生します。（CVE-2019-8912）

  - バージョン 4.20.8 および 4.19.21 以前の Linux カーネルにおいて、SCTP_SENDALL フラグを処理する際の sctp_sendmsg() 関数 (net/sctp/socket.c) のメモリ解放後使用 (use-after-free) エラーが悪用され、メモリ破損につながる可能性があります。
    (CVE-2019-8956)

  - 4.20.11 より前の Linux カーネルの fs/exec.c の kernel_read_file 関数でのメモリリークにより、攻撃者が vfs_read の失敗を発生させることで、サービス拒否 (メモリ消費) を引き起こす可能性があります。
    (CVE-2019-8980)

  - 4.20.5 以前の Linux カーネルは、service ipmievd restart ループで実証されているように、攻撃者がコードの特定の同時実行を準備することで、drivers/char/ipmi/ipmi_msghandler.c のメモリ解放後使用 (Use After Free) と OOPS を発生させる可能性があります。(CVE-2019-9003)

  - 4.20.12 より前の Linux カーネルにおいて、SNMP NAT モジュールの net/ipv4/netfilter/nf_nat_snmp_basic_main.c は、ASN.1 の長さを適切にチェックしない (別名: 配列インデックスエラー) ため、領域外の読み取りおよび書き込み操作が可能となり、OOPS またはローカル権限の昇格につながる可能性があります。これは snmp_version と snmp_helper に影響を与えます。(CVE-2019-9162)

  -4.20.14より前のLinuxカーネルのmm/mmap.c内のexpand_downwardsにmmapの最小アドレスのチェックがないため、攻撃者がSMAP以外のプラットフォームでカーネルNULLポインターデリファレンスを悪用しやすくなっています。これは、間違ったタスクの機能チェックに関連しています。(CVE-2019-9213)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Mathias Payer 和 Hui Peng 在進階 Linux 音效架構 (ALSA) 子系統中，發現了釋放後使用弱點。實際位置靠近的攻擊者可利用此弱點造成拒絕服務 (系統當機)。(CVE-2018-19824) Shlomi Oberman、Yuli Shapiro 和 Ran Menscher 在 Linux 核心的藍牙實作中發現資訊洩漏。在藍牙範圍內的攻擊者可利用此弱點洩漏敏感資訊 (核心記憶體)。(CVE-2019-3459、CVE-2019-3460) Jann Horn 發現 Linux 核心中的 KVM 實作包含釋放後使用弱點。擁有 /dev/kvm 存取權之客體虛擬機器中的攻擊者，可利用此弱點造成拒絕服務 (客體虛擬機器當機)。(CVE-2019-6974) Jim Mattson 和 Felix Wilhelm 發現在 Linux 核心的 KVM 子系統中，使用巢狀虛擬機器時存在釋放後使用弱點。客體虛擬機器中的本機攻擊者可利用此弱點造成拒絕服務 (系統當機) 或可能在主機系統中執行任意程式碼。(CVE-2019-7221) Felix Wilhelm 發現使用巢狀虛擬化時，Linux 核心中的 KVM 子系統存在資訊洩漏弱點。本機攻擊者可利用此弱點洩漏敏感資訊 (對客體虛擬機器的主機系統記憶體)。(CVE-2019-7222) Jann Horn 發現 Linux 核心中的 eBPF 實作對於 Spectre V1 攻擊的防禦強化程度不足。本機攻擊者可利用此問題洩漏敏感資訊。(CVE-2019-7308) 據發現，Linux 核心中 crypto (af_alg) 實作的使用者空間 API 存在釋放後使用弱點。本機攻擊者可利用此弱點，造成拒絕服務 (系統當機)，或可能執行任意程式碼。(CVE-2019-8912) Jakub Jirasek 發現在 Linux 核心的 SCTP 實作中發生釋放後使用弱點。本機攻擊者可利用此弱點，造成拒絕服務 (系統當機)，或可能執行任意程式碼。(CVE-2019-8956) 據發現，Linux 核心在讀取檔案期間處理某些錯誤時，並未正確取消配置記憶體。本機攻擊者可利用此弱點造成拒絕服務 (過度記憶體消耗)。(CVE-2019-8980) 據發現，Linux 核心的 IPMI 實作中存在一個釋放後使用弱點。具有 IPMI 字元裝置檔案存取權的本機攻擊者可利用此弱點造成拒絕服務 (系統當機)。(CVE-2019-9003) Jann Horn 發現 Linux 核心中的 SNMP NAT 實作未充分執行 ASN.1 長度檢查。攻擊者可利用此弱點，造成拒絕服務 (系統當機)，或可能執行任意程式碼。(CVE-2019-9162) Jann Horn 發現 Linux 核心中的 mmap 實作在某些情況下，未正確檢查 mmap 最小值位址。本機攻擊者可利用此問題協助惡意利用核心 NULL 指標解除參照弱點。(CVE-2019-9213)。請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

Mathias Payer 和 Hui Peng 在高级 Linux 声音架构 (ALSA) 子系统中发现一个释放后重用漏洞。物理邻近攻击者可利用此问题造成拒绝服务（系统崩溃）。(CVE-2018-19824) Shlomi Oberman、Yuli Shapiro 和 Ran Menscher 在 Linux 内核的蓝牙实现中发现信息泄漏。蓝牙作用范围内的攻击者可能利用此问题暴露敏感信息（内核内存）。(CVE-2019-3459, CVE-2019-3460) Jann Horn 发现 Linux 内核的 KVM 实现中包含释放后重用漏洞。客户机 VM 中具有 /dev/kvm 访问权限的本地攻击者可利用此漏洞造成拒绝服务（客户机 VM 崩溃）。(CVE-2019-6974) Jim Mattson 和 Felix Wilhelm 发现，使用嵌套虚拟机时，Linux 内核的 KVM 子系统中存在释放后重用漏洞。客户机 VM 中的本地攻击者可利用此漏洞造成拒绝服务（系统崩溃）或可能在主机系统中执行任意代码。(CVE-2019-7221) Felix Wilhelm 发现启用嵌套虚拟化时，Linux 内核中的 KVM 子系统存在信息泄漏漏洞。本地攻击者可利用此漏洞暴露敏感信息（从主机系统内存泄漏到客户机 VM）。(CVE-2019-7222) Jann Horn 发现 Linux 内核中的 eBPF 实现对于 Spectre V1 攻击的防御强化程度不足。本地攻击者可利用此问题暴露敏感信息。(CVE-2019-7308) 发现 Linux 内核中用于 crypto (af_alg) 实现的用户空间 API 中存在释放后重用漏洞。本地攻击者可利用此问题造成拒绝服务（系统崩溃）或可能执行任意代码。(CVE-2019-8912) Jakub Jirasek 发现在 Linux 内核中的SCTP 实现存在释放后重用漏洞。本地攻击者可利用此问题造成拒绝服务（系统崩溃）或可能执行任意代码。(CVE-2019-8956) 发现 Linux 内核在读取文件期间处理某些错误时，未正确解除内存分配。本地攻击者可利用此问题造成拒绝服务（内存过多消耗）。(CVE-2019-8980) 发现 Linux 内核的 IPMI 实现存在释放后重用漏洞。具有 IPMI 字符设备文件访问权限的本地攻击者可利用此漏洞造成拒绝服务（系统崩溃）。(CVE-2019-9003) Jann Horn 发现 Linux 内核中的 SNMP NAT 实现未充分执行 ASN.1 长度检查。攻击者可利用此问题造成拒绝服务（系统崩溃）或可能执行任意代码。(CVE-2019-9162) Jann Horn 发现 Linux 内核的 mmap 实现在某些情况下未能正确检查 mmap 最小地址。本地攻击者可利用此问题协助利用内核空指针取消引用漏洞。(CVE-2019-9213)。请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

遠端 Ubuntu 18.04 LTS 主機上安裝的一個套件受到 USN-3930-2 公告中所提及的多個弱點影響。

  - 在 4.19.6 及更早版本的 Linux 核心中，本機使用者可透過提供惡意 USB 音效裝置 (零介面)，利用 sound/usb/card.c 中的 usb_audio_probe 對該裝置的處理錯誤，藉此惡意利用 ALSA 驅動程式中的釋放後使用缺陷。(CVE-2018-19824)

  - 據發現，在 5.1-rc1 之前的 Linux 核心中，使用 L2CAP_GET_CONF_OPT 時存在堆積位址資訊洩漏。(CVE-2019-3459)

  - 據發現，在 5.1-rc1 之前的 Linux 核心中，多個位置 (包括 L2CAP_PARSE_CONF_RSP) 存在堆積資料洩漏。(CVE-2019-3460)

  - 在 Linux 核心 4.20.8 之前版本中，virt/kvm/kvm_main.c 中的 kvm_ioctl_create_device 由於存在爭用情形而錯誤處理參照計數，這可以造成釋放後使用。(CVE-2019-6974)

  - Linux 核心 4.20.5 及之前版本中的 KVM 實作存在釋放後使用弱點。(CVE-2019-7221)

  - Linux 核心 4.20.5 及之前版本中的 KVM 實作存在資訊洩漏弱點。(CVE-2019-7222)

  - 在 Linux 核心 4.20.6 之前版本中，kernel/bpf/verifier.c 在多種情況 (包括具有不同狀態或清理限制之不同分支的情況) 下，會針對指標算術執行不受歡迎的超出邊界推測，進而導致旁路攻擊。(CVE-2019-7308)

  在 4.20.11 及之前版本的 Linux 核心中，crypto/af_alg.c 中的 af_alg_release() 會針對特定結構成員忽略設定 NULL 值，進而導致 sockfs_setattr 中發生釋放後使用情形。(CVE-2019-8912)

  - 在 Linux 核心 4.20.8 之前版本和 4.19.21 版中，攻擊者可利用 sctp_sendmsg() 函式 (net/sctp/socket.c) 在處理 SCTP_SENDALL 旗標時發生的釋放後使用錯誤來造成記憶體損毀。
    (CVE-2019-8956)

  在直至 4.20.11 之前版本的 Linux 核心中，fs/exec.c 中的 kernel_read_file 函式存在記憶體洩漏問題，攻擊者可透過觸發 vfs_read 失敗來造成拒絕服務 (記憶體耗盡)。
    (CVE-2019-8980)

  - 在 Linux 核心 4.20.5 之前版本中，攻擊者可藉由安排特定的程式碼同步執行來觸發 drivers/char/ipmi/ipmi_msghandler.c 的釋放後使用和 OOPS 弱點，服務 ipmievd 重新啟動迴圈即為一例。(CVE-2019-9003)

  - 在 Linux 核心 4.20.12 之前版本中，SNMP NAT 模組中的 net/ipv4/netfilter/nf_nat_snmp_basic_main.c 缺少充分的 ASN.1 長度檢查 (即陣列索引錯誤)，可能會造成超出邊界讀取和寫入作業，導致 OOPS 或本機權限提升。此問題會影響 snmp_version 和 snmp_helper。(CVE-2019-9162)

  - 在 4.20.14 之前的 Linux 核心中，mm/mmap.c 中的 expand_downwards 缺少 mmap 最小值位址檢查，使攻擊者更容易惡意利用非 SMAP 平台上的核心 NULL 指標解除參照。這與錯誤作業的功能檢查有關。(CVE-2019-9213)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Ubuntu 18.04 LTS 主机上安装的一个程序包受到 USN-3930-2 公告中提及的多个漏洞影响。

  - 在 Linux 内核 4.19.6 及之前版本中，本地用户可通过提供恶意 USB 声音设备（零接口），利用 ALSA 驱动程序中的释放后使用，这是 sound/usb/card.c 中的 usb_audio_probe 中存在处理不当问题所致。(CVE-2018-19824)

  - 使用 L2CAP_GET_CONF_OPT 时，在 5.1-rc1 之前的 Linux 内核中发现堆地址信息泄露。(CVE-2019-3459)

  - 在 5.1-rc1 之前的 Linux 内核中发现多个位置（包括 L2CAP_PARSE_CONF_RSP）存在堆数据信息泄露。(CVE-2019-3460)

  - 在 Linux 内核 4.20.8 之前版本中，virt/kvm/kvm_main.c 中的 kvm_ioctl_create_device 因为争用条件而错误处理引用计数，从而导致释放后使用。(CVE-2019-6974)

  - Linux 内核 4.20.5 及其之前版本的 KVM 实现中存在释放后使用。(CVE-2019-7221)

  - Linux 内核 4.20.5 及其之前版本的 KVM 实现中存在信息泄露。(CVE-2019-7222)

  - Linux 内核 4.20.6 之前版本中的 kernel/bpf/verifier.c 在多种情况（包括具有不同状态或清理限制之不同分支的情况）下，会针对指针运算执行不受欢迎的越界推测，进而导致边信道攻击。(CVE-2019-7308)

  - 在 Linux 内核 4.20.11 及之前版本中，crypto/af_alg.c 中的 af_alg_release() 忽略了为特定结构成员设置 NULL 值，进而导致 sockfs_setattr 中发生释放后使用。(CVE-2019-8912)

  - 在版本低于 4.20.8 和 4.19.21 的 Linux 内核中，处理 SCTP_SENDALL 标记时，sctp_sendmsg() 函数 (net/sctp/socket.c) 中的释放后使用错误可被用于导致内存损坏。
    (CVE-2019-8956)

  - 在 Linux 内核 4.20.11 及其之前版本中，fs/exec.c 的 kernel_read_file 函数中存在内存泄漏，允许攻击者通过触发 vfs_read 失败，造成拒绝服务（内存消耗）。
    (CVE-2019-8980)

  - 在 4.20.5 之前的 Linux 内核中，攻击者可通过安排某些代码同时执行来触发 drivers/char/ipmi/ipmi_msghandler.c 释放后使用和 OOPS，服务 ipmievd 重新启动循环即为一例。(CVE-2019-9003)

  - 在 4.20.12 之前的 Linux 内核中，SNMP NAT 模块的 net/ipv4/netfilter/nf_nat_snmp_basic_main.c 未充分检查 ASN.1 长度（也称为数组索引错误），导致可能发生越界读取和写入操作，进而导致 OOPS 或本地权限提升。这会影响 snmp_version 和 snmp_helper。(CVE-2019-9162)

  - 在低于 4.20.14 的 Linux 内核版本中，mm/mmap.c 中的 expand_downwards 缺少 mmap 最小地址检查，这使攻击者更容易在非 SMAP 平台上利用内核空指针取消引用。此问题与错误任务的功能检查相关。(CVE-2019-9213)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The kernel package contains the Linux kernel (vmlinuz),     the core of any Linux operating system. The kernel     handles the basic functions of the operating system:
    memory allocation, process allocation, device input and     output, etc.Security Fix(es):An issue was discovered in     rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel     before 5.0.8. There is a race condition leading to a     use-after-free, related to net namespace     cleanup.(CVE-2019-11815)A flaw was found in the Linux     kernel's handle_rx() function in the vhost_net driver.
    A malicious virtual guest, under specific conditions,     can trigger an out-of-bounds write in a kmalloc-8 slab     on a virtual host which may lead to a kernel memory     corruption and a system panic. Due to the nature of the     flaw, privilege escalation cannot be fully ruled     out.(CVE-2018-16880)A NULL pointer dereference security     flaw was found in the Linux kernel in kvm_pv_send_ipi()     in arch/x86/kvm/lapic.c. This allows local users with     certain privileges to cause a denial of service via a     crafted system call to the KVM     subsystem.(CVE-2018-19406)The function     hso_get_config_data in driverset/usb/hso.c in the Linux     kernel through 4.19.8 reads if_num from the USB device     (as a u8) and uses it to index a small array, resulting     in an object out-of-bounds (OOB) read that potentially     allows arbitrary read in the kernel address     space.(CVE-2018-19985)** RESERVED ** This candidate has     been reserved by an organization or individual that     will use it when announcing a new security problem.
    When the candidate has been publicized, the details for     this candidate will be provided.(CVE-2019-3459)**     RESERVED ** This candidate has been reserved by an     organization or individual that will use it when     announcing a new security problem. When the candidate     has been publicized, the details for this candidate     will be provided.(CVE-2019-3460)A flaw was found in the     Linux kernel in the function hid_debug_events_read() in     the drivers/hid/hid-debug.c file which may enter an     infinite loop with certain parameters passed from a     userspace. A local privileged user ('root') can cause a     system lock up and a denial of     service.(CVE-2019-3819)In the Linux kernel before     4.20.14, expand_downwards in mm/mmap.c lacks a check     for the mmap minimum address, which makes it easier for     attackers to exploit kernel NULL pointer dereferences     on non-SMAP platforms. This is related to a capability     check for the wrong task.(CVE-2019-9213)A flaw was     found in the Linux kernel's vfio interface     implementation that permits violation of the user's     locked memory limit. If a device is bound to a vfio     driver, such as vfio-pci, and the local attacker is     administratively granted ownership of the device, it     may cause a system memory exhaustion and thus a denial     of service (DoS). Versions 3.10, 4.14 and 4.18 are     vulnerable.(CVE-2019-3882)An infinite loop issue was     found in the vhost_net kernel module in Linux Kernel up     to and including v5.1-rc6, while handling incoming     packets in handle_rx(). It could occur if one end sends     packets faster than the other end can process them. A     guest user, maybe remote one, could use this flaw to     stall the vhost_net kernel thread, resulting in a DoS     scenario.(CVE-2019-3900)It was found that the net_dma     code in tcp_recvmsg() in the 2.6.32 kernel as shipped     in RHEL6 is thread-unsafe. So an unprivileged     multi-threaded userspace application calling recvmsg()     for the same network socket in parallel executed on     ioatdma-enabled hardware with net_dma enabled can leak     the memory, crash the host leading to a     denial-of-service or cause a random memory     corruption.(CVE-2019-3837)A race condition in     perf_event_open() allows local attackers to leak     sensitive data from setuid programs. As no relevant     locks (in particular the cred_guard_mutex) are held     during the ptrace_may_access() call, it is possible for     the specified target task to perform an execve()     syscall with setuid execution before perf_event_alloc()     actually attaches to it, allowing an attacker to bypass     the ptrace_may_access() check and the     perf_event_exit_task(current) call that is performed in     install_exec_creds() during privileged execve() calls.
    This issue affects kernel versions before 4.8.
    (CVE-2019-3901)** RESERVED ** This candidate has been     reserved by an organization or individual that will use     it when announcing a new security problem. When the     candidate has been publicized, the details for this     candidate will be     provided.(CVE-2019-8956)cipso_v4_validate in     includeet/cipso_ipv4.h in the Linux kernel before     3.11.7, when CONFIG_NETLABEL is disabled, allows     attackers to cause a denial of service (infinite loop     and crash), as demonstrated by icmpsic, a different     vulnerability than CVE-2013-0310.(CVE-2013-7470)Note1:
    kernel-4.19.36-vhulk1907.1.0.h529 and earlier versions     in EulerOS Virtualization for ARM 64 3.0.2.0 return     incorrect time information when executing the uname -a     command.Note2: The kernel version number naming format     has been changed after 4.19.36-1.2.184.aarch64, the new     version format is 4.19.36-vhulk1907.1.0.hxxx.aarch64,     which may lead to false positives of this security     advisory.

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mathias Payer and Hui Peng discovered a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) subsystem. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2018-19824)

Shlomi Oberman, Yuli Shapiro, and Ran Menscher discovered an information leak in the Bluetooth implementation of the Linux kernel.
An attacker within Bluetooth range could use this to expose sensitive information (kernel memory). (CVE-2019-3459, CVE-2019-3460)

Jann Horn discovered that the KVM implementation in the Linux kernel contained a use-after-free vulnerability. An attacker in a guest VM with access to /dev/kvm could use this to cause a denial of service (guest VM crash). (CVE-2019-6974)

Jim Mattson and Felix Wilhelm discovered a use-after-free vulnerability in the KVM subsystem of the Linux kernel, when using nested virtual machines. A local attacker in a guest VM could use this to cause a denial of service (system crash) or possibly execute arbitrary code in the host system. (CVE-2019-7221)

Felix Wilhelm discovered that an information leak vulnerability existed in the KVM subsystem of the Linux kernel, when nested virtualization is used. A local attacker could use this to expose sensitive information (host system memory to a guest VM).
(CVE-2019-7222)

Jann Horn discovered that the eBPF implementation in the Linux kernel was insufficiently hardened against Spectre V1 attacks. A local attacker could use this to expose sensitive information.
(CVE-2019-7308)

It was discovered that a use-after-free vulnerability existed in the user- space API for crypto (af_alg) implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-8912)

Jakub Jirasek discovered a use-after-free vulnerability in the SCTP implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-8956)

It was discovered that the Linux kernel did not properly deallocate memory when handling certain errors while reading files. A local attacker could use this to cause a denial of service (excessive memory consumption). (CVE-2019-8980)

It was discovered that a use-after-free vulnerability existed in the IPMI implementation in the Linux kernel. A local attacker with access to the IPMI character device files could use this to cause a denial of service (system crash). (CVE-2019-9003)

Jann Horn discovered that the SNMP NAT implementation in the Linux kernel performed insufficient ASN.1 length checks. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-9162)

Jann Horn discovered that the mmap implementation in the Linux kernel did not properly check for the mmap minimum address in some situations. A local attacker could use this to assist exploiting a kernel NULL pointer dereference vulnerability. (CVE-2019-9213).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
134387	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1186)	Nessus	Huawei Local Security Checks	2020/3/11	2023/1/18	critical
123677	Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3930-2)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/1/9	high
123676	Ubuntu 18.10 LTS：linux、linux-aws、linux-azure、linux-gcp、linux-kvm、linux-raspi2（USN-3930-1）	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/6/6	high
123677	Ubuntu 18.04 LTS : Linux カーネル (HWE) の脆弱性 (USN-3930-2)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/1/9	high
123676	Ubuntu 18.10：linux、linux-aws、linux-azure、linux-gcp、linux-kvm、linux-raspi2 (USN-3930-1)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/6/6	high
123676	Ubuntu 18.10：linux、linux-aws、linux-azure、linux-gcp、linux-kvm、linux-raspi2 (USN-3930-1)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/6/6	high
123677	Ubuntu 18.04 LTS：Linux 核心 (HWE) 弱點 (USN-3930-2)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/1/9	high
123677	Ubuntu 18.04 LTS：Linux 内核 (HWE) 漏洞 (USN-3930-2)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/1/9	high
125588	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2019-1636)	Nessus	Huawei Local Security Checks	2019/5/30	2024/5/17	high
123676	Ubuntu 18.10 : linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 (USN-3930-1)	Nessus	Ubuntu Local Security Checks	2019/4/3	2024/6/6	high

検出

プラグインの検索

critical

high

high

high

high

high

high

high

high

high