Oracle Linux 5 : kvm (ELSA-2013-0727)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0727 advisory. - Resolves: bz917018 CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSRKVMSYSTEMTIME rhel-5.9.z - Resolves: bz917022 CVE-2013-1797 kernel:...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2507)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2507 advisory. - vhost: fix length for cross region descriptor Michael S. Tsirkin Orabug: 16387183 CVE-2013-0311 - x86/xen: don't assume %ds is usable in xeniret...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2013)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2013 advisory. - KVM: Ensure all vcpus are consistent with in-kernel irqchip settings Avi Kivity Bugdb: 13871 CVE-2012-1601 Tenable has extracted the preceding...

Oracle Linux 6 : qemu-kvm (ELSA-2013-0609)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0609 advisory. - Resolves: bz910841 CVE-2012-6075 qemu e1000 device driver: Buffer overflow when processing large packets when SBP and LPE flags are disabled rhel-6.4.z Tenabl...

Oracle Linux 5 : kvm (ELSA-2009-1659)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1659 advisory. - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z Tenable has extracted the preceding description block...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2519)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2519 advisory. - KVM: x86: Convert MSRKVMSYSTEMTIME to use gfntohvacache functions CVE-2013-1797 Andy Honig Orabug: 16711660 CVE-2013-1797 - Bluetooth: Fix...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2022)

Description of changes: Avoid bug caused by corrupted Ext4 filesystem. When mounting an ext4 filesystem, the kernel was not checking for zero length extents. This would cause a BUGON assertion failure in the log. NULL pointer dereference in the SCSI subsystem. A NULL dereference may occur if a SC...

Oracle Linux 5 : kvm (ELSA-2013-0608)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0608 advisory. kvm-83-262.0.1.el59.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-262.el51 -...

Oracle Linux 5 : kvm (ELSA-2009-1465)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1465 advisory. 83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch...

Oracle Linux 5 : kvm (ELSA-2012-0051)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0051 advisory. - Resolves: bz772079 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-5.7.z - Resolves: bz770100...

Oracle Linux 6 : kernel (ELSA-2013-0911)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0911 advisory. - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094 - virt kvm: validate userspaceaddr of memslot...

Oracle Linux 5 : kvm (ELSA-2010-0088)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0088 advisory. - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch bz560769 - Resolves: bz560769 CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer...

Oracle Linux 5 : kvm (ELSA-2010-0627)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0627 advisory. - Resolves: bz619412 CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpageregister rhel-5.5.z -...

Oracle Linux 5 : kvm (ELSA-2010-0998)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0998 advisory. - Resolves: bz649832 CVE-2010-3881 kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory 5.5.z Tenable has extracted the preceding description block...

Oracle Linux 5 : kvm (ELSA-2012-1235)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1235 advisory. - CVE: CVE-2012-3515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2523 advisory. - block: default SCSI command filter does not accomodate commands overlap across device classes Jamie Iles Orabug: 16387137 CVE-2012-4542 - KVM: x86: Conver...

Oracle Linux 5 : qspice (ELSA-2010-0633)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0633 advisory. 0.3.0-54.el55.2 - Fix unsafe accesses + spice: drop libpng from windows components 537849 + libspice: fix unsafe guest data accessing Resolves: 568719 ...

Oracle Linux 5 : kvm (ELSA-2010-0898)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0898 advisory. - Related: bz639886 CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic rhel-5.5.z - Resolves: bz639886 CVE-2010-3698 kvm: invalid selector in fs/g...

Oracle Linux 5 : kvm (ELSA-2012-0676)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0676 advisory. - CVE: CVE-2012-2121 - Resolves: bz814151 CVE-2012-2121 kvm: device assignment page leak rhel-5.8 - Resolves: bz808205 CVE-2012-1601 kernel: kvm:...