OracleVM 3.3 : kernel-uek (OVMSA-2015-0113)

The remote OracleVM system is missing necessary patches to address critical security updates : - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563041 CVE-2015-5697 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3066)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3066 advisory. kernel-uek 3.8.13-98.1.1 - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563041 CVE-2015-5697 Tenable has extracted the preceding...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.10 - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563043 CVE-2015-5697 - netfilter: nfconntrack: reserve two bytes for nfctext-len Andrey Vagin Orabug: 21562781 CVE-2014-9715...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0094)

The remote OracleVM system is missing necessary patches to address critical security updates : - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444790 CVE-2015-2922 - ipv4: Missing sknullsnodeinit in pingunhash. David S. Miller Orabug: 21444687 CVE-2015-3636 %NASLMINLEVEL...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3050)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3050 advisory. kernel-uek 2.6.32-400.37.7 - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444792 CVE-2015-2922 Tenable has extracted the preceding...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0072)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/asm/entry/64: Remove a bogus 'retfromfork' optimization Andy Lutomirski Orabug: 21308309 CVE-2015-2830 - x86, mm/ASLR: Fix stack randomization on 64-bit systems Hector Marco-Gisbert Orabug: 213079...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0069)

The remote OracleVM system is missing necessary patches to address critical security updates : - x8664, vdso: Fix the vdso address randomization algorithm Andy Lutomirski Orabug: 21226729 CVE-2014-9585 - isofs: Fix infinite looping over CE entries Jan Kara Orabug: 21225975 CVE-2014-9420 - x8664,...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0060)

The remote OracleVM system is missing necessary patches to address critical security updates : - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077385 CVE-2015-3331 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807438...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930551 CVE-2014-9584 - KEYS: close race between key lookup and freeing Sasha Levin Orabug: 20930548 CVE-2014-9529 CVE-2014-9529 - mm:...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.4 - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930553 CVE-2014-9584 - selinux: Permit bounded transitions under NONEWPRIVS or NOSUID. Stephen Smalley Orabug: 20930502 CVE-2014-3215 - Add PRGET,SETNONEWPRIVS to prevent execve from granting privs Andy...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-68.1.3 - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930551 CVE-2014-9584 - KEYS: close race between key lookup and freeing Sasha Levin Orabug: 20930548 CVE-2014-9529 CVE-2014-9529 - mm: memcg: do not allow task about to OOM kill to bypass the limit Johannes...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0040)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0040 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3021)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-3021 advisory. kernel-uek 2.6.32-400.37.3 - net: sctp: fix slab corruption from use after free on INIT collisions Daniel Borkmann Orabug: 20780349 CVE-2015-1421 Tenable ha...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.3 - net: sctp: fix slab corruption from use after free on INIT collisions Daniel Borkmann Orabug: 20780349 CVE-2015-1421...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0034)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm: fix excessive pages un-pinning in kvmiommumap error path. Quentin Casasnovas Orabug: 20687313 CVE-2014-3601 CVE-2014-8369 CVE-2014-3601 - ttusb-dec: buffer overflow in ioctl Dan Carpenter Orabug:...

Unbreakable Enterprise kernel security and bugfix update

kernel-uek 3.8.13-55.1.5 - CIFS Possible null ptr deref in SMB2tcon Steve French Orabug: 20433140 CVE-2014-7145 3.8.13-55.1.4 - net: sctp: fix NULL pointer dereference in af-fromaddrparam on malformed packet Daniel Borkmann Orabug: 20425332 CVE-2014-7841 3.8.13-55.1.3 - ACPI: x2apic entry ignored...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-55.1.1 - ALSA: control: Protect user controls against concurrent access Lars-Peter Clausen Orabug: 20192540 CVE-2014-4652 - target/rd: Refactor rdbuilddevicespace + rdreleasedevicespace Nicholas Bellinger Orabug: 20192516 CVE-2014-4027 - HID: logitech: perform bounds checking on...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-55 - freezer: set PFSUSPENDTASK flag on tasks that call freezeprocesses Colin Cross Orabug: 20082843 3.8.13-54 - netfilter: nfnat: fix oops on netns removal Florian Westphal Orabug: 19988779 - tcp: tsq: restore minimal amount of queueing Eric Dumazet Orabug: 19909542 - qedf: Fix...

OracleVM 3.1 : kernel-uek (OVMSA-2012-0042)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix bug number for commit 'cciss: Update HPSABOUNDARY' Joe Jin Orabug: 14681166 - cciss: Update HPSABOUNDARY. Joe Jin Orabug: 14319765 - KVM: introduce kvmforeachmemslot macro Maxim Uvarov Bugdb: 1396...

OracleVM 3.2 : kernel-uek (OVMSA-2013-0003)

The remote OracleVM system is missing necessary patches to address critical security updates : - bonding: fixup typo in rlb mode of bond and bridge fix Guru Anbalagane Orabug: 16069448 - bonding: rlb mode of bond should not alter ARP originating via bridge zheng.li Orabug: 14650975 - compilation...