ID de Prueba:	1.3.6.1.4.1.25623.1.0.105417
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - Linux kernel vulnerability CVE-2015-1805
Resumen:	The remote host is missing a security patch.
Descripción:	Summary: The remote host is missing a security patch. Vulnerability Insight: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an 'I/O vector array overrun.' (CVE-2015-1805) Vulnerability Impact: A local unprivileged user may use this flaw to crash the system, or potentially escalate their privileges on the system. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1805 BugTraq ID: 74951 http://www.securityfocus.com/bid/74951 Debian Security Information: DSA-3290 (Google Search) http://www.debian.org/security/2015/dsa-3290 http://www.openwall.com/lists/oss-security/2015/06/06/2 RedHat Security Advisories: RHSA-2015:1042 http://rhn.redhat.com/errata/RHSA-2015-1042.html RedHat Security Advisories: RHSA-2015:1081 http://rhn.redhat.com/errata/RHSA-2015-1081.html RedHat Security Advisories: RHSA-2015:1082 http://rhn.redhat.com/errata/RHSA-2015-1082.html RedHat Security Advisories: RHSA-2015:1120 http://rhn.redhat.com/errata/RHSA-2015-1120.html RedHat Security Advisories: RHSA-2015:1137 http://rhn.redhat.com/errata/RHSA-2015-1137.html RedHat Security Advisories: RHSA-2015:1138 http://rhn.redhat.com/errata/RHSA-2015-1138.html RedHat Security Advisories: RHSA-2015:1190 http://rhn.redhat.com/errata/RHSA-2015-1190.html RedHat Security Advisories: RHSA-2015:1199 http://rhn.redhat.com/errata/RHSA-2015-1199.html RedHat Security Advisories: RHSA-2015:1211 http://rhn.redhat.com/errata/RHSA-2015-1211.html http://www.securitytracker.com/id/1032454 SuSE Security Announcement: SUSE-SU-2015:1224 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html SuSE Security Announcement: SUSE-SU-2015:1324 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html SuSE Security Announcement: SUSE-SU-2015:1478 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html SuSE Security Announcement: SUSE-SU-2015:1487 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html SuSE Security Announcement: SUSE-SU-2015:1488 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html SuSE Security Announcement: SUSE-SU-2015:1489 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html SuSE Security Announcement: SUSE-SU-2015:1490 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html SuSE Security Announcement: SUSE-SU-2015:1491 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html SuSE Security Announcement: SUSE-SU-2015:1592 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html SuSE Security Announcement: SUSE-SU-2015:1611 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html http://www.ubuntu.com/usn/USN-2679-1 http://www.ubuntu.com/usn/USN-2680-1 http://www.ubuntu.com/usn/USN-2681-1 http://www.ubuntu.com/usn/USN-2967-1 http://www.ubuntu.com/usn/USN-2967-2
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.