Oracle Linux 7 : libsndfile (ELSA-2020-1185)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1185 advisory. 1.0.25-11 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598577 Tenable has extracted the preceding description block...

Oracle Linux 7 : fuse (ELSA-2020-5773)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5773 advisory. - Security Update based on ELSA-2018-3324 fuse: bypass of the 'userallowother' restriction when SELinux is active. OraBugzilla: 43547CVE-2018-10906 Lans Hung...

Oracle Linux 7 : keepalived (ELSA-2019-2285)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2285 advisory. 1.3.5-16 - Rework previous miscscript/vrrpscript patch 1667292 1.3.5-15 - Rework previous checker comparison patch 1715308 1.3.5-14 - Make checker variables non...

Oracle Linux 7 : systemd (ELSA-2019-2091)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2091 advisory. - core: when deserializing state always use readline, LONGLINEMAX, CVE-2018-15686 - dhcp6: make sure we have enough space for the DHCP6 option header...

Oracle Linux 7 : tcpdump (ELSA-2020-5662)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-5662 advisory. 4.9.2-4.0.1.el77.1 - Fix CVE-2018-14468 Orabug: 30480183 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 7 : edk2 (ELSA-2019-4785)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4785 advisory. 1:1.2-5.el7 - Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmfvarsgenerator so qemu will not require kvm kernel...

Oracle Linux 7 : poppler (ELSA-2019-2022)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2022 advisory. evince 3.28.2-8 - Do not free EvDocumentInfo in evwindowsaveprintsettings, - it is freed in EvDocuments destructor - Resolves: 1541358 3.28.2-7 - Do no...

Oracle Linux 7 : qemu (ELSA-2018-4313)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4313 advisory. - usb-mtp: outlaw slashes in filenames Gerd Hoffmann Orabug: 29037012 CVE-2018-16867 - lsi53c895a: check message length value is valid Prasad J Pandit Orabug:...

Oracle Linux 7 : http-parser (ELSA-2019-2258)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2258 advisory. - Related: rhbz1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser allowed for spaces inside Content-Length header values rhel-7 - Resolves:...

Oracle Linux 7 : libsolv (ELSA-2019-2290)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2290 advisory. - Fix NULL pointer dereference CVE-2018-20532, CVE-2018-20533 - Fix illegal address access in poolwhatprovides CVE-2018-20534 Tenable has extracted the...

Oracle Linux 7 : blktrace (ELSA-2019-2162)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2162 advisory. 1.0.5-9 - Fix buffer overflow in the devmapread function 1580579 Fixes CVE-2018-10689 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : kernel (ELSA-2020-1016)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1016 advisory. - mm mm: prevent getuserpages from overflowing page refcount Aristeu Rozanski 1705005 CVE-2019-11487 - mm mm/hugetlb.c: getuserpages ignores certain...

Oracle Linux 7 : cups (ELSA-2020-1050)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1050 advisory. - 1651575 - CVE-2018-4700 cups - 1608764 - CVE-2018-4180 cups Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : net-snmp (ELSA-2020-1081)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1081 advisory. - fix for CVE-2018-18066 1638911 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : procps-ng (ELSA-2019-2189)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2189 advisory. 3.3.10-26 - free: unreclaimable slabs counted into free memory, used mem incorrect - Resolves: rhbz1699264 3.3.10-25 - ps: recognize SCHEDDEADLINE in CLS field,...

Oracle Linux 7 : libjpeg-turbo (ELSA-2019-2052)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2052 advisory. - Fix CVE-2018-14498 1687475 - Fix CVE-2018-11212 1586062 - Fix CVE-2016-3616 1318509, CVE-2018-11213 1589091 and CVE-2018-11214 1589110 Tenable has...

Oracle Linux 7 : qemu (ELSA-2018-4312)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4312 advisory. - usb-mtp: outlaw slashes in filenames Gerd Hoffmann Orabug: 29037012 CVE-2018-16867 - lsi53c895a: check message length value is valid Prasad J Pandit Orabug:...

Oracle Linux 8 : GStreamer, / libmad, / and / SDL (ELSA-2020-1631)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1631 advisory. - Fixes CVE-2018-7263 - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit functions in video/SDLblit.c Tenable has extracted the preceding...

Oracle Linux 7 : glibc (ELSA-2018-3092)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3092 advisory. - CVE-2017-16997: Correctly handle DTRPATH 1540480. - CVE-2018-11237: AVX-512 mempcpy for KNL buffer overflow 1579809 - CVE-2018-11236: Path length...

Oracle Linux 7 : taglib (ELSA-2020-1175)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1175 advisory. 1.8-8.20130218git - Fixed OOB read when loading invalid ogg flac file Resolves: bz1585260 Tenable has extracted the preceding description block directly from th...