Oracle Linux 7 : openssh (ELSA-2016-2588)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2588 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1329191 Tenable has extracted the preceding description block directly from th...

Oracle Linux 7 : dhcp (ELSA-2016-2590)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2590 advisory. - unclosed TCP connections to OMAPI or failover ports can cause DoS CVE-2016-2774 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : curl (ELSA-2016-2575)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2575 advisory. - fix incorrect use of a previously loaded certificate from file related to CVE-2016-5420 - acknowledge the --no-sessionid/CURLOPTSSLSESSIONIDCACHE...

Oracle Linux 7 : poppler (ELSA-2016-2580)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2580 advisory. 0.26.5-16 - Fix crash in Splash - Resolves: 1299492 0.26.5-15 - Check array length - Resolves: 1299506 0.26.5-14 - Show correct glyph or none instead of 'fi' -...

Oracle Linux 7 : ntp (ELSA-2016-2583)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2583 advisory. - add disable monitor to default ntp.conf CVE-2013-5211 - don't allow spoofed packet to enable symmetric interleaved mode CVE-2016-1548 - check mode of...

Oracle Linux 7 : php (ELSA-2016-2598)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2598 advisory. - bz2: fix improper error handling in bzread CVE-2016-5399 - gd: fix integer overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 - gd: fi...

Oracle Linux 7 : systemd (ELSA-2016-2610)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2610 advisory. 219-30.0.1.3 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - ad...

Oracle Linux 7 : 389-ds-base (ELSA-2016-2594)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2594 advisory. - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack - Resolves: bug 1350799 - CVE-2016-499...

Oracle Linux 7 : python (ELSA-2016-2586)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2586 advisory. - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359164 - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.getdata...

Oracle Linux 7 : sudo (ELSA-2016-2593)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2593 advisory. 1.8.6p7-20 - RHEL 7.3 erratum - fixed visudo's -q flag Resolves: rhbz1350828 1.8.6p7-19 - RHEL 7.3 erratum - removed INPUTRC from envkeep to prevent a potential...

Oracle Linux 7 : libguestfs / and / virt-p2v (ELSA-2016-2576)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2576 advisory. - Build using OCaml with fix for CVE-2015-8869. resolves: rhbz1343101 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : util-linux (ELSA-2016-2605)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2605 advisory. 2.23.2-33.0.1 - fix Oracle bug 23001516 - backport lscpu: correct the Virtualization type on Xen DomU PV guest - Reviewed-by: Joe Jin 2.23.2-33 - improve patch...

Oracle Linux 7 : kernel (ELSA-2016-2574)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2574 advisory. - mm remove gupflags FOLLWRITE games from getuserpages Larry Woodman 1385124 CVE-2016-5195 - net add recursion limit to GRO Sabrina Dubroca 1374191...

Oracle Linux 6 / 7 : libgcrypt (ELSA-2016-2674)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2674 advisory. - fix CVE-2016-6313 - predictable PRNG output 1366105 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 / 6 / 7 : java-1.7.0-openjdk (ELSA-2016-2658)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2658 advisory. 1:1.7.0.121-2.6.8.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.121-2.6.8.0 - Turn off HotSpot bootstrap to see if it resolves build issues. -...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3636)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3636 advisory. - ecryptfs: forbid opening files without mmap handler Jann Horn Orabug: 24971919 CVE-2016-1583 Tenable has extracted the preceding description block directl...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3635)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3635 advisory. - sched: panic on corrupted stack end Jann Horn Orabug: 24971921 CVE-2016-1583 - ecryptfs: forbid opening files without mmap handler Jann Horn Orabug:...

Oracle Linux 5 / 6 : bind (ELSA-2016-2141)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2141 advisory. 30:9.3.6-25.P1.11 - Fix CVE-2016-8864 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 5 : kernel (ELSA-2016-2124)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2124 advisory. - mm Fix Privilege escalation via MAPPRIVATE Larry Woodman 1385112 CVE-2016-5195 Tenable has extracted the preceding description block directly from th...

Oracle Linux 5 : kernel (ELSA-2016-2124-1)

The remote Oracle Linux host is missing a security update for the kernel packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2016-2124-1. include'deprecatednasllevel.inc'; include'compat.inc'; if...