Oracle Linux 5 : dhcp (ELSA-2012-1140)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1140 advisory. 12:3.0.5-31.1 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected servers. CVE-2012-3571, 843124...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2504)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2504 advisory. - exec: do not leave bprm-interp on stack Kees Cook Orabug: 16286741 CVE-2012-4530 - exec: use -ELOOP for max recursion depth Kees Cook Orabug:...

Oracle Linux 5 : kernel (ELSA-2012-1445-1)

From Red Hat Security Advisory 2012:1445 : Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base...

Oracle Linux 6 : mysql (ELSA-2012-1551)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1551 advisory. 5.1.66-2 - Add backported patch for CVE-2012-5611 Resolves: CVE-2012-5611 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2525)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2525 advisory. - net: fix incorrect credentials passing Linus Torvalds Orabug: 16836975 CVE-2013-1979 - tg3: fix length overflow in VPD firmware parsing Kees Cook...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2026)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2026 advisory. - epoll: clear the tfilechecklist on -ELOOP Joe Jin CVE-2012-3375 - epoll: kabi fixups for epoll limit wakeup paths Joe Jin CVE-2011-1083 - epoll:...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 6 : dbus (ELSA-2012-1261)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1261 advisory. - Apply patches for CVE-2011-2200 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 6 : quagga (ELSA-2012-1259)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1259 advisory. - improve fix for CVE-2011-3325 - fix CVE-2011-3323 - fix CVE-2011-3324 - fix CVE-2011-3325 - fix CVE-2011-3326 - fix CVE-2011-3327 - fix CVE-2012-0255...

Oracle Linux 6 : openchange (ELSA-2013-0515)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0515 advisory. evolution-mapi 0.28.3-12 - Add patch for RH bug 903241 Double-free on message copy/move 0.28.3-11 - Add patch for RH bug 902932 Cannot connect with latest samba...

Oracle Linux 5 / 6 : elinks (ELSA-2013-0250)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0250 advisory. 0.12-0.21.pre5 - do not delegate GSSAPI credentials CVE-2012-4545 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : ipa (ELSA-2013-0528)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0528 advisory. - Fix typo in patch 0048 for CVE-2012-5484 878220 - Compliant client side session cookie behavior. CVE-2012-5631. 886371 - Use secure method to retrieve IPA CA...

Oracle Linux 5 : openssl (ELSA-2012-0060)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0060 advisory. - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes 771770 - fix for CVE-2011-4109 - double free ...

Oracle Linux 5 : squirrelmail (ELSA-2012-0103)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-0103 advisory. - patch for CVE-2010-2813 was not complete - fix: CVE-2010-1637 : Port-scans via non-standard POP3 server ports in Mail Fetch plugin - fix: CVE-2010-28...

Oracle Linux 5 : vixie-cron (ELSA-2012-0304)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0304 advisory. - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Tenable has extracted the preceding...

Oracle Linux 6 : mysql (ELSA-2012-1462)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1462 advisory. 5.1.66-1 - Update to 5.1.66, for assorted upstream bugfixes including CVEs announced in July and October 2012 Resolves: 871813 Tenable has extracted th...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2008)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2008 advisory. - regset: Return -EFAULT, not -EIO, on host-side memory fault H. Peter Anvin CVE-2012-1097 - regset: Prevent null pointer reference on readonly...

Oracle Linux 6 : openjpeg (ELSA-2012-1068)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1068 advisory. - Apply patches for CVE-2009-5030, CVE-2012-3358 Resolves: 831561 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2012-1386)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1386 advisory. 1.7.0.9-2.3.3.0.1.el63.1 - Update DISTRONAME in specfile 1.7.0.9-2.3.3.el6.1 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865050...

Oracle Linux 5 : php53 (ELSA-2012-0092)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0092 advisory. 5.3.3-1.6 - add security fix for CVE-2012-0830 786757 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...