Oracle Linux 7 : http-parser (ELSA-2020-0703)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0703 advisory. - Do not break ABI with CVE-2019-15605 fix Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5559)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5559 advisory. kernel-uek 3.8.13-118.43.1 - media: b2c2-flexcop-usb: add sanity checking Oliver Neukum Orabug: 30864534 CVE-2019-15291 Tenable has extracted the preceding...

Oracle Linux 7 : ppp (ELSA-2020-0630)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0630 advisory. 2.4.5-34.0.2 - Userland headers should always appear before kernel - Orabug: 27656836 [email protected] 2.4.5-34 - Fixed buffer overflow in the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5543)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5543 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30944739 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5542)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5542 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847137 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

Oracle Linux 7 : thunderbird (ELSA-2020-0576)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0576 advisory. 68.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.5.0-1 - Update to 68.5.0 build1 Tenable has...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5540)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5540 advisory. - KVM: nVMX: Check IO instruction VM-exit conditions Oliver Upton Orabug: 30847136 CVE-2020-2732 - KVM: nVMX: Refactor IO bitmap checks into helper function...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5541)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5541 advisory. - mwifiex: Fix heap overflow in mmwifiexprocesstdlsactionframe qize wang Orabug: 30819439 CVE-2019-14901 - media: b2c2-flexcop-usb: add sanity...

Oracle Linux 7 : sudo (ELSA-2020-0540)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0540 advisory. - fixed CVE-2019-18634 Resolves: rhbz1798094 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : firefox (ELSA-2020-0520)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0520 advisory. 68.5.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5535)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5535 advisory. - KVM: x86: fix out-of-bounds write in KVMGETEMULATEDCPUID CVE-2019-19332 Paolo Bonzini Orabug: 30658695 CVE-2019-19332 - rtlwifi: Fix potential...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5533)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5533 advisory. - rtlwifi: Fix potential overflow on P2P code Laura Abbott Orabug: 30807747 CVE-2019-17666 - rds: fix an infoleak in rdsincinfocopy Kangjie Lu Orabug:...

Oracle Linux 7 : kernel (ELSA-2020-0374)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0374 advisory. - wireless mwifiex: Fix heap overflow in mmwifiexprocesstdlsactionframe Stanislaw Gruszka 1776156 1776157 CVE-2019-14901 Tenable has extracted the...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5526)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5526 advisory. - x86/KVM: Clean up host's steal time structure Boris Ostrovsky Orabug: 30489861 CVE-2019-3016 CVE-2019-3016 - x86/KVM: Make sure KVMVCPUFLUSHTLB flag ...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5528)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5528 advisory. 4.14.35-1902.10.4.1.el7uek - IB/mlx4: Fix use after free in RDMA CM disconnect code path Manjunath Patil Orabug: 30815818 - IB/mlx4: Fix leak in...

Oracle Linux 7 : openjpeg2 (ELSA-2020-0262)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0262 advisory. 2.3.1-2 - Fix CVE-2020-6851 resolves: 1790586 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : sqlite (ELSA-2020-0227)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0227 advisory. 3.7.17-8.1 - Fixes for CVE-2019-13734 1786505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2020-0196)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0196 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

Oracle Linux 7 : python-reportlab (ELSA-2020-0195)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0195 advisory. 2.5-9.el77.1 - Do not eval strings passed to toColor - Resolves: 1788552 2.5-9 - Mass rebuild 2014-01-24 2.5-8 - Mass rebuild 2013-12-27 2.5-7 - Rebuilt for...

Oracle Linux 7 : libarchive (ELSA-2020-0203)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0203 advisory. 3.1.2-14 - Fix patch application error 3.1.2-13 - Fix CVE-2019-18408: RAR use-after-free Tenable has extracted the preceding description block directly from the...