Oracle Linux 5 : qspice (ELSA-2010-0633)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0633 advisory. 0.3.0-54.el55.2 - Fix unsafe accesses + spice: drop libpng from windows components 537849 + libspice: fix unsafe guest data accessing Resolves: 568719 ...

Oracle Linux 5 : Unbreakable enterprise kernel (ELSA-2010-2011)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-2011 advisory. - sctp Do not reset the packet during sctppacketconCVE-2010-3432 - drm/i915 Sanity check pread/pwrite CVE-2010-2962 - wireless fix kernel heap content...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0896)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0896 advisory. - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch bz957056 - Resolves: bz957056 CVE-2013-2007 qemu: guest agent creates files with insecure...

Oracle Linux 6 : qemu-kvm (ELSA-2011-1777)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1777 advisory. - CVE: CVE-2011-4111 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 6 : qemu-kvm (ELSA-2011-0345)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0345 advisory. - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch bz668598 - Resolves: bz668598 CVE-2011-0011 qemu-kvm: Setting VNC password to empty string...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2519)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2519 advisory. - KVM: x86: Convert MSRKVMSYSTEMTIME to use gfntohvacache functions CVE-2013-1797 Andy Honig Orabug: 16711660 CVE-2013-1797 - Bluetooth: Fix...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

Oracle Linux 5 : kvm (ELSA-2012-1235)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1235 advisory. - CVE: CVE-2012-3515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 5 : kvm (ELSA-2010-0998)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0998 advisory. - Resolves: bz649832 CVE-2010-3881 kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory 5.5.z Tenable has extracted the preceding description block...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0609)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0609 advisory. - Resolves: bz910841 CVE-2012-6075 qemu e1000 device driver: Buffer overflow when processing large packets when SBP and LPE flags are disabled rhel-6.4.z Tenabl...

Oracle Linux 5 : kvm (ELSA-2013-0727)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0727 advisory. - Resolves: bz917018 CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSRKVMSYSTEMTIME rhel-5.9.z - Resolves: bz917022 CVE-2013-1797 kernel:...

Oracle Linux 6 : kernel (ELSA-2012-0571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0571 advisory. - virt VMX: vmxsetcr0 expects kvm-srcu locked Marcelo Tosatti 808206 807507 CVE-2012-1601 - virt KVM: Ensure all vcpus are consistent with in-kernel...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2013)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2013 advisory. - KVM: Ensure all vcpus are consistent with in-kernel irqchip settings Avi Kivity Bugdb: 13871 CVE-2012-1601 Tenable has extracted the preceding...

Oracle Linux 5 : kvm (ELSA-2010-0088)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0088 advisory. - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch bz560769 - Resolves: bz560769 CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer...

Oracle Linux 5 : kvm (ELSA-2010-0627)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0627 advisory. - Resolves: bz619412 CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpageregister rhel-5.5.z -...

Oracle Linux 5 : kvm (ELSA-2009-1465)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1465 advisory. 83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch...

Oracle Linux 5 : kvm (ELSA-2012-0051)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0051 advisory. - Resolves: bz772079 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-5.7.z - Resolves: bz770100...

Oracle Linux 6 : kernel (ELSA-2013-0911)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0911 advisory. - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094 - virt kvm: validate userspaceaddr of memslot...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 6 : qemu-kvm (ELSA-2012-0050)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0050 advisory. - Resolves: bz772081 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-6.2.z - CVE: CVE-2011-4127 - Resolves: bz7677...