Oracle Linux 7 : openssh (ELSA-2017-2029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2029 advisory. 7.4p1-11 + 0.10.3-1 - Compiler warnings 1341754 7.4p1-10 + 0.10.3-1 - Add missing messages in FIPS mode 1341754 7.4p1-9 + 0.10.3-1 - Allow harmless...

Oracle Linux 7 : tigervnc / and / fltk (ELSA-2017-2000)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2000 advisory. - Delete underlying ssecurity in SSecurityVeNCrypt CCVE-2017-7392 Resolves: bz1439127 Prevent double free by crafted fences CVE-2017-7393 Resolves:...

Oracle Linux 7 : samba (ELSA-2017-1950)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1950 advisory. - resolves: 1450785 - Security fix for CVE-2017-7494 - related: 1430260 - Security fix for CVE-2017-2619 - resolves: 1430260 - Security fix for CVE-2017-2619...

Oracle Linux 7 : kernel (ELSA-2017-1842)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1842 advisory. - The doumount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAPSYSADMIN capability for doremountsb calls that chang...

Oracle Linux 7 : glibc (ELSA-2017-1916)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1916 advisory. - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing out-of-range data to strftime 1374658 - Fix CVE-2015-8778: Integer overflow in hcreate...

Oracle Linux 7 : ghostscript (ELSA-2017-2180)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2180 advisory. - Security fix for CVE-2017-8291 updated to address SIGSEGV - Added security fix for CVE-2017-8291 bug 1446063 - Added security fix for CVE-2017-7207 bug 143435...

Oracle Linux 7 : qemu-kvm (ELSA-2017-1856)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1856 advisory. - Resolves: bz1451614 CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server rhel-7.4 - Resolves: bz1430060 CVE-2016-9603 qemu-kv...

Oracle Linux 7 : gnutls (ELSA-2017-2292)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2292 advisory. - Address crash in OCSP status request extension, by eliminating the unneeded parsing CVE-2017-7507, 1455828 Tenable has extracted the preceding...

Oracle Linux 7 : authconfig (ELSA-2017-2285)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2285 advisory. - fix typo in the patch for CVE-2017-7488 1441604 - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server 144160...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3595)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3595 advisory. - ALSA: timer: Fix missing queue indices reset at SNDRVTIMERIOCTLSELECT Takashi Iwai Orabug: 26403952 CVE-2017-1000380 - ALSA: timer: Fix race...

Oracle Linux 7 : tomcat (ELSA-2017-1809)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1809 advisory. - Resolves: rhbz1441487 CVE-2017-5648 tomcat: Calls to application listeners did not use the appropriate facade object - Resolves: rhbz1441480...

Oracle Linux 7 : graphite2 (ELSA-2017-1793)

From Red Hat Security Advisory 2017:1793 : An update for graphite2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Oracle Linux 7 : bind (ELSA-2017-1680)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1680 advisory. - Fix CVE-2017-3142 and CVE-2017-3143 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : qemu-kvm (ELSA-2017-1681)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1681 advisory. 1.5.3-126.el73.10 - kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch bz1460179 - kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch bz1460179...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3589)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3589 advisory. - macsec: dynamically allocate space for sglist Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - macsec: avoid heap overflow in skbtosgvec Jason...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3590)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3590 advisory. - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366022 CVE-2017-7645 - HID: hid-cypress: validate length of report Greg Kroah-Hartm...

Oracle Linux 7 : kernel (ELSA-2017-1615)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1615 advisory. - mm enlarge stack guard gap Larry Woodman 1452732 1452733 CVE-2017-1000364 - fs nfsd: stricter decoding of write-like NFSv2/v3 ops 'J. Bruce Fields'...

Oracle Linux 7 : freeradius (ELSA-2017-1581)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1581 advisory. 3.0.4-8 - Disable internal OpenSSL cache and fix session cache file permissions. Resolves: Bug1459131 CVE-2017-9148 freeradius: TLS resumption authentication...

Oracle Linux 7 : qemu-kvm (ELSA-2017-1430)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1430 advisory. 1.5.3-126.el73.9 - kvm-spice-fix-spicechraddwatch-pre-condition.patch bz1452332 - Resolves: bz1452332 RHEL 7.2 based VM Virtual Machine hung for severa...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3579)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3579 advisory. - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143545 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey...