Oracle Linux 7 : elfutils (ELSA-2019-2197)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2197 advisory. 0.176-2 - Add elfutils-0.176-xlate-note.patch 1704754 0.176-1 - New upstream release 1676504 CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150...

Oracle Linux 7 : ELSA-2017-2473-1: / kernel (ELSA-2017-24731)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-24731 advisory. - Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory...

Oracle Linux 7 : kubernetes / kubeadm-upgrade / kubeadm-ha-setup (ELSA-2019-4593)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4593 advisory. - OLCNE-235 CVE-2019-9946 portmap inserts rules at the front of the iptables nat chains -- CVE-2019-9946 -- CVE-2019-1002101 -- CVE-2019-1002100...

Oracle Linux 7 : taglib (ELSA-2020-1175)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1175 advisory. 1.8-8.20130218git - Fixed OOB read when loading invalid ogg flac file Resolves: bz1585260 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : libreoffice (ELSA-2020-1151)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1151 advisory. - Resolves: rhbz1743962 CVE-2019-9848 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4733)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4733 advisory. - x86/speculation: Exclude ATOMs from speculation through SWAPGS Thomas Gleixner Orabug: 29967570 CVE-2019-1125 - x86/speculation: Enable Spectre v1 swapgs...

Oracle Linux 7 : qemu (ELSA-2019-4518)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4518 advisory. - usb-mtp: use ONOFOLLOW and OCLOEXEC. Gerd Hoffmann Orabug: 29056673 CVE-2018-16872 - pvrdma: add uarread routine Prasad J Pandit CVE-2018-20191 -...

Oracle Linux 7 : cloud-init (ELSA-2020-3898)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3898 advisory. - Resolves: bz1574338 CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances rhel-7 - Resolves: bz1812170 CVE-2020-8632...

Oracle Linux 7 : libwpd (ELSA-2019-2126)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2126 advisory. 0.10.0-2 - Resolves: rhbz1650535 CVE-2018-19208 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Oracle Linux 7 : okular (ELSA-2020-1173)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1173 advisory. 4.10.5-8 - Fix path traversal issue when extracting an .okular file Resolves: bz1634726 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : mercurial (ELSA-2019-2276)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2276 advisory. - Add missing hunk for CVE-2018-13347 patch - Related: CVE-2018-13347 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : GNOME (ELSA-2018-3140)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3140 advisory. - Backport upstream patch for CVE-2018-12910 - Crash in soupcookiejar.c: getcookies on empty hostnames - Security fix for CVE-2018-15120 - Fix crash wh...

Oracle Linux 7 : curl (ELSA-2019-2181)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2181 advisory. - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitive password comparison...

Oracle Linux 7 : poppler / and / evince (ELSA-2020-1074)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1074 advisory. evince 3.28.2-9 - Handle failure from TIFFReadRGBAImageOriented - Resolves: 1717352 poppler 0.26.5-42 - Fix potential integer overflow and check length...

Oracle Linux 7 : poppler (ELSA-2019-2022)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2022 advisory. evince 3.28.2-8 - Do not free EvDocumentInfo in evwindowsaveprintsettings, - it is freed in EvDocuments destructor - Resolves: 1541358 3.28.2-7 - Do no...

Oracle Linux 7 : docker-engine (ELSA-2019-4597)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-4597 advisory. 18.03.1.ol-0.0.14 - rebuild 18.03.1.ol-0.0.13 - update for CVE-2018-20699 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : compat-libtiff3 (ELSA-2019-2051)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2051 advisory. - Fix CVE-2018-7456 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 7 : cups (ELSA-2020-1050)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1050 advisory. - 1651575 - CVE-2018-4700 cups - 1608764 - CVE-2018-4180 cups Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : libsolv (ELSA-2019-2290)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2290 advisory. - Fix NULL pointer dereference CVE-2018-20532, CVE-2018-20533 - Fix illegal address access in poolwhatprovides CVE-2018-20534 Tenable has extracted the...

Oracle Linux 7 : ovmf (ELSA-2019-2125)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2125 advisory. - Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing atta...