CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

CVE-2016-0617

CVE-2016-0617 corresponds to an unspecified vulnerability in the kernel-uek component of Oracle Linux 6. The CVSS data indicates a local-privilege context with a local attacker, aiming to affect availability (Impact: Availability = HIGH; Integrity/Confidentiality = NONE). Publicly detailed exploi...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0134)

The remote OracleVM system is missing necessary patches to address critical security updates : - netfilter: xtables: make sure e-nextoffset covers remaining blob size Florian Westphal Orabug: 24682076 CVE-2016-4997 CVE-2016-4998 - netfilter: xtables: validate e-targetoffset early Florian Westphal...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0100)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0100 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.11.2 - Btrfs: fix truncation of compressed and inlined extents Ashish Samant Orabug: 22307285 CVE-2015-8374 - Btrfs: fix file corruption and data loss after cloning inline extents Divya Indi Orabug: 22307285 CVE-2015-8374 - netfilter: xtables: make sure e-nextoffset covers...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-61.1.6 - blk-mq: avoid setting hctx-tags-cpumask before allocation Akinobu Mita Orabug: 24464170 4.1.12-61.1.3 - ocfs2: improve recovery performance Junxiao Bi Orabug: 24395729 - qed: Utilize FW 8.10.3.0 Yuval Mintz Orabug: 24442553 - blk-mq: mark request queue as mq asap Ming L...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0098)

The remote OracleVM system is missing necessary patches to address critical security updates : - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010012 Orabug: 2401010 CVE-2016-5696 - ocfs2: call ocfs2journalaccessdi before ocfs2journaldirty in ocfs2writeendnolock yangwenfang...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0097)

The remote OracleVM system is missing necessary patches to address critical security updates : - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010103 Orabug: 2401010 CVE-2016-5696 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0094)

The remote OracleVM system is missing necessary patches to address critical security updates : - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393865 CVE-2016-4470 - ovl: fix permission checking for setattr Miklos Szeredi Orabug: 24393742 CVE-2015-8660 %NASLMINLEVEL 70300 C Tenab...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0095)

The remote OracleVM system is missing necessary patches to address critical security updates : - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393864 CVE-2016-4470 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM...

Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3587)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3587 advisory. - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3588)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3588 advisory. kernel-uek 3.8.13-118.9.1 - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov...

OracleVM 3.3 : kernel-uek (OVMSA-2016-0092)

The remote OracleVM system is missing necessary patches to address critical security updates : - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov Orabug: 23072705 - mm/slab: Improve performance of slabinfo stats gatheri...

OracleVM 3.4 : kernel-uek (OVMSA-2016-0091)

The remote OracleVM system is missing necessary patches to address critical security updates : - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 -...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.9.1 - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov Orabug: 23072705 - mm/slab: Improve performance of slabinfo stats gathering Aruna Ramakrishna Orabug: 23720437 - atl2: Disable unimplemented...

kernel-uek security update

kernel-uek 4.1.12-37.6.1 - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - ovl: verify upper dentry before unlink and rename Miklos Szeredi Orabu...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3579)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3579 advisory. kernel-uek 2.6.32-400.37.18uek - IB/security: Restrict use of the write interface Jason Gunthorpe Orabug: 23641666 CVE-2016-4565 Tenable has extracted the...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.18uek - IB/security: Restrict use of the write interface Jason Gunthorpe Orabug: 23641666 CVE-2016-4565...

OracleVM 3.3 : kernel-uek (OVMSA-2016-0084)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert 'x8664: expand kernel stack to 16K' Chuck Anderson Orabug: 23608686 - megaraidsas : Update threshold based reply post host index register Orabug: 23562756 - xen/events: Don't move disabled irqs...

OracleVM 3.4 : kernel-uek (OVMSA-2016-0083)

The remote OracleVM system is missing necessary patches to address critical security updates : - sched/core: Clear the rootdomain cpumasks in initrootdomain Xunlei Pang Orabug: 23520741 - ocfs2: bump up o2cb network protocol version Junxiao Bi Orabug: 23515810 - IB/security: Restrict use of the...