Oracle Linux 6 : kernel (ELSA-2013-0911)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0911 advisory. - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094 - virt kvm: validate userspaceaddr of memslot...

Oracle Linux 6 : qemu-kvm (ELSA-2011-0919)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0919 advisory. qemu-kvm-0.12.1.2-2.160.el61.2 - kvm-virtio-guard-against-negative-vq-notifies.patch bz717403 - Resolves: bz717403 qemu-kvm: OOB memory access caused b...

Oracle Linux 5 : kvm (ELSA-2013-0727)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0727 advisory. - Resolves: bz917018 CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSRKVMSYSTEMTIME rhel-5.9.z - Resolves: bz917022 CVE-2013-1797 kernel:...

Oracle Linux 5 : kvm (ELSA-2010-0627)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0627 advisory. - Resolves: bz619412 CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpageregister rhel-5.5.z -...

Oracle Linux 5 : kvm (ELSA-2010-0998)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0998 advisory. - Resolves: bz649832 CVE-2010-3881 kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory 5.5.z Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2519)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2519 advisory. - KVM: x86: Convert MSRKVMSYSTEMTIME to use gfntohvacache functions CVE-2013-1797 Andy Honig Orabug: 16711660 CVE-2013-1797 - Bluetooth: Fix...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2022)

Description of changes: Avoid bug caused by corrupted Ext4 filesystem. When mounting an ext4 filesystem, the kernel was not checking for zero length extents. This would cause a BUGON assertion failure in the log. NULL pointer dereference in the SCSI subsystem. A NULL dereference may occur if a SC...

Oracle Linux 5 : kvm (ELSA-2009-1659)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1659 advisory. - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z Tenable has extracted the preceding description block...

Oracle Linux 5 : Unbreakable enterprise kernel (ELSA-2010-2011)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-2011 advisory. - sctp Do not reset the packet during sctppacketconCVE-2010-3432 - drm/i915 Sanity check pread/pwrite CVE-2010-2962 - wireless fix kernel heap content...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2013)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2013 advisory. - KVM: Ensure all vcpus are consistent with in-kernel irqchip settings Avi Kivity Bugdb: 13871 CVE-2012-1601 Tenable has extracted the preceding...

Oracle Linux 6 : kernel (ELSA-2012-0571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0571 advisory. - virt VMX: vmxsetcr0 expects kvm-srcu locked Marcelo Tosatti 808206 807507 CVE-2012-1601 - virt KVM: Ensure all vcpus are consistent with in-kernel...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0609)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0609 advisory. - Resolves: bz910841 CVE-2012-6075 qemu e1000 device driver: Buffer overflow when processing large packets when SBP and LPE flags are disabled rhel-6.4.z Tenabl...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

Oracle Linux 5 : kvm (ELSA-2013-0608)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0608 advisory. kvm-83-262.0.1.el59.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-262.el51 -...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2503)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2503 advisory. - kmod: make requestmodule killable Oleg Nesterov Orabug: 16286305 CVE-2012-4398 - kmod: introduce callmodprobe helper Oleg Nesterov Orabug: 162863...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0896)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0896 advisory. - kvm-qga-set-umask-0077-when-daemonizing-CVE-2013-2007.patch bz957056 - Resolves: bz957056 CVE-2013-2007 qemu: guest agent creates files with insecure...

Oracle Linux 6 : qemu-kvm (ELSA-2011-0345)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0345 advisory. - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch bz668598 - Resolves: bz668598 CVE-2011-0011 qemu-kvm: Setting VNC password to empty string...

Oracle Linux 5 : qspice (ELSA-2010-0633)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0633 advisory. 0.3.0-54.el55.2 - Fix unsafe accesses + spice: drop libpng from windows components 537849 + libspice: fix unsafe guest data accessing Resolves: 568719 ...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 5 : kvm (ELSA-2010-0898)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0898 advisory. - Related: bz639886 CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic rhel-5.5.z - Resolves: bz639886 CVE-2010-3698 kvm: invalid selector in fs/g...