Oracle Linux 6 : expat (ELSA-2022-9359)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9359 advisory. - Prevent integer overflow in storeRawNames CVE-2022-25315Orabug: 34059442 - Add missing validation of encoding CVE-2022-25235Orabug: 34059442 Tenable...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9348)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9348 advisory. - fget: check that the fd still exists after getting a ref to it Linus Torvalds Orabug: 33679806 CVE-2021-0920 - afunix: fix garbage collect vs...

RHEL 6 : kernel (RHSA-2022:1417)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1417 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in eventpoll.c...

Oracle Linux 6 : openssl (ELSA-2022-9272)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9272 advisory. - Fix possible infinite loop in BNmodsqrt CVE-2022-0778Orabug: 33969800 - Backport fixes for CVE-2020-1971 Orabug: 32654738 - Oracle bug 28730228: backport...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9260)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9260 advisory. - drm/i915: Flush TLBs before releasing backing store Tvrtko Ursulin Orabug: 33835812 CVE-2022-0330 - drm/i915: Reduce locking in execlist command...

Oracle Linux 6 : httpd (ELSA-2022-9257)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9257 advisory. 2.2.15-69.0.3 - core: Simpler connection close logic CVE-2022-22720Orabug: 33991577 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 6 : openssl (ELSA-2022-9246)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9246 advisory. 1.0.1e-59.0.3 - Fix possible infinite loop in BNmodsqrt CVE-2022-0778Orabug: 33969800 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : cyrus-sasl (ELSA-2022-9239)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9239 advisory. 2.1.23-15.0.1.2 - Escape password for SQL insert/update commands CVE-2022-24407Orabug: 33936121 Tenable has extracted the preceding description block directly...

Oracle Linux 6 : aide (ELSA-2022-9165)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9165 advisory. 0.14-11.0.1 - precalculate buffer size in base64 functions Orabug: 33835910CVE-2021-45417 Tenable has extracted the preceding description block directly from th...

RHEL 6 : aide (RHSA-2022:0472)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0472 advisory. Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file...

Oracle Linux 6 : bind (ELSA-2022-9117)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9117 advisory. - Backport fix for CVE-2018-5741 Orabug: 33496185 - Backport possible assertion failure on DNAME processing CVE-2021-25215 - Backport the fix for buffer overflo...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9088)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9088 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33699627 Orabug: 33762471 CVE-2021-4155 - fix...

Oracle Linux 6 : polkit (ELSA-2022-9073)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9073 advisory. 0.96-11.0.1.el610.1 - pkexec: local privilege escalation Orabug: 33789506CVE-2021-4034 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : log4j (ELSA-2022-9056)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9056 advisory. 0:1.2.14-6.4.1 - Fix remote code execution vulnerability - Resolves: CVE-2021-4104 Orabug: 33689748 Tenable has extracted the preceding description block direct...

Oracle Linux 6 : nss (ELSA-2021-9591)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9591 advisory. 3.44.0-7.0.2 - Fix CVE-2021-43527 Orabug: 33627334 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

RHEL 6 : bind (RHSA-2021:0672)

"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0672 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9534)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9534 advisory. - Bluetooth: hciuart: check for missing tty operations Vladis Dronov Orabug: 30244627 CVE-2019-10207 CVE-2019-10207 - Bluetooth: hciuart: Add basic...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9442)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9442 advisory. - l2tp: fix race between l2tpsessiondelete and l2tptunnelcloseall Guillaume Nault Orabug: 33113975 CVE-2020-0429 - l2tp: ensure sessions are freed...

Oracle Linux 6 : kernel (ELSA-2021-9434)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9434 advisory. - kernel futex: Use pistateupdateowner in putpistate Thomas Gleixner 1922249 CVE-2021-3347 Orabug: 33150734 - kernel futex: Handle faults correctly for...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9395)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9395 advisory. - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33143006 CVE-2021-33909 - net/mlx4: Fix EEPROM dump support Vladysl...