vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace Существующие решения на основе eBPF для смягчения cve-2026-31431 требуют lsm=bpf при загрузке, который обычно не установлен по умолчанию. Для OracleLinux это было включено по умолчанию в UEKr7u3 и в UEKr8u1 после декабря 2025 года. Чтобы проверить, можете ли...

Oracle Linux 10 : gdb (ELSA-2026-73427)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73427 advisory. 16.3-3.1.0.1 Merge Oracle patches for ol10-u2 Reviewed-by: Jose E. Marchesi Oracle history: March-4-2026 Claudiu Zissulescu - 16.3-3.0.1 Merge Oracle patches...

Oracle Linux 9 : gdb (ELSA-2026-73426)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73426 advisory. 16.3-3.1.0.1 - Merge Oracle patches for ol9-u8. Reviewed-by: Jose E. Marchesi Oracle history: March-06-2026 Claudiu Zissulescu - 16.3-3.0.1 - Merge Oracle...

Oracle Linux 8 : gawk (ELSA-2026-73511)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-73511 advisory. - Fix use-after-free in dogetlineredir CVE-2026-40467 Resolves: RHEL-222601 Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : libpcap (ELSA-2026-74442)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-74442 advisory. 14:1.10.4-7.1 - Fix CVE-2026-0799: validate BPF scratch memory register indices in the BPF interpreter to prevent out-of-bounds memory access Resolves:...

Oracle Linux 8 : rsync (ELSA-2026-74095)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74095 advisory. 3.1.3-28 - Resolves: RHEL-256903 - Fix latest CVEs in rsync in RHEL8 - Fixing a regression introduced with the security patches Tenable has extracted...

Oracle Linux 8 : gvfs (ELSA-2026-73997)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73997 advisory. 1.36.2-22 - Fix heap buffer overflow in SFTP backend CVE-2026-84268 Resolves: RHEL-252300 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : thunderbird (ELSA-2026-73971)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-73971 advisory. 140.16.0-1 - Add Oracle prefs file 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolve...

Oracle Linux 10 : gvfs (ELSA-2026-73998)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73998 advisory. - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252305, RHEL-257341 Tenable has extracted the preceding description block...

Oracle Linux 9 : gvfs (ELSA-2026-74370)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74370 advisory. 1.48.1-8.1 - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252312, RHEL-257348 Tenable has extracted the preceding...

Oracle Linux 9 : gawk (ELSA-2026-73512)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73512 advisory. 5.1.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467...

Oracle Linux 9 : ruby (ELSA-2026-72286)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72286 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing T...

Oracle Linux 8 : kernel (ELSA-2026-71329)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71329 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-237293 CVE-2026-68121 - nvme-tcp: reject a read that transferred too few bytes...

Oracle Linux 9 : nodejs:24 (ELSA-2026-73838)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73838 advisory. - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 9 : pki-core (ELSA-2026-73766)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73766 advisory. - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list Tenable has extracted the preceding description block directly...

Oracle Linux 10 : corosync (ELSA-2026-67872)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67872 advisory. 3.1.10-1.2 - Resolves: RHEL-251541 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665 Tenable has extracted the preceding description bloc...

Oracle Linux 10 : freerdp (ELSA-2026-73979)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73979 advisory. - Abort after PROTOCOLFAILEDNEGO CVE-2026-91949 Resolves: RHEL-264913 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : kernel (ELSA-2026-72623)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72623 advisory. - arm64: tlb: Flush walk cache when unsharing PMD tables Rafael Aquini RHEL-259312 CVE-2026-63875 - perf: Reject exited events as group leaders Anubha...

Oracle Linux 8 : perl-DBI (ELSA-2026-71608)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71608 advisory. 1.641-3 - Force placeholder limit on :N and :pN placeholders CVE-2026-73194 Resolves: RHEL-247320 Tenable has extracted the preceding description block directl...