Oracle Linux 7 : openssh (ELSA-2018-0980)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0980 advisory. - Fix for CVE-2017-15906 1517226 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : qemu-kvm (ELSA-2018-0816)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0816 advisory. - Resolves: bz1518711 CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC rhel-7.5 - Resolves: bz1527405...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4062)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4062 advisory. - fork: fix incorrect fput of -exefile causing use-after-free Eric Biggers Orabug: 27290198 CVE-2017-17052 - KVM: x86: fix singlestepping over...

RHEL 7 : krb5 (RHSA-2018:0666)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0666 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

RHEL 7 : pcs (RHSA-2018:1060)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1060 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: pcs: Privilege...

RHEL 7 : python-paramiko (RHSA-2018:0646)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:0646 advisory. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines...

RHEL 7 : glibc (RHSA-2018:0805)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0805 advisory. - glibc: denial of service in getnetbyname function CVE-2014-9402 - glibc: DNS resolver NULL pointer dereference with crafted record type...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 7. The microcodectl packages provide microcode updates for Intel and AMD processors. For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section...

Oracle Linux 7 : kubernetes (ELSA-2018-4061)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4061 advisory. - Ensure that the runtime mounts RO volumes read-only CVE-2017-1002102 - Update Dashboard version to v1.8.3 CVE-2017-1002102 - Fix nested volume mounts...

Oracle Linux 7 : slf4j (ELSA-2018-0592)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0592 advisory. 0:1.7.4-4 - Disallow EventData deserialization by default CVE-2018-8088 Tenable has extracted the preceding description block directly from the Oracle Linux...

RHEL 7 : ceph (RHSA-2018:0546)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0546 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...

CentOS 7 : mailman (CESA-2018:0505)

An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Oracle Linux 7 : mailman (ELSA-2018-0505)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-0505 advisory. 3:2.1.15-26.1 - Related: 1545974 - Add import regular expression module 3:2.1.15-26 - Related: 1545974 - Bump release to make it higher than 7.5 3:2.1.15-24.2 -...

Oracle Linux 7 : dhcp (ELSA-2018-0483)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0483 advisory. - Resolves: 1550000 - CVE-2018-5733 Avoid buffer overflow reference counter Tenable has extracted the preceding description block directly from the...

CentOS 7 : php (CESA-2018:0406)

An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CentOS 7 : libreoffice (CESA-2018:0418)

An update for libreoffice is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Oracle Linux 7 : 389-ds-base (ELSA-2018-0414)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0414 advisory. - Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service DoS via search filters in SetUnicodeStringFromUTF8 - Resolves: Bug 1535539 -...

Oracle Linux 7 : libreoffice (ELSA-2018-0418)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0418 advisory. - Resolves: rhbz1545034 - CVE-2018-1055 CVE-2018-6871 - Resolves: rhbz1445635 CVE-2017-7870 Heap-buffer-overflow in tools::Polygon::Insert - Resolves: rhbz14355...

Oracle Linux 7 : php (ELSA-2018-0406)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0406 advisory. 5.4.16-43.1 - gd: fix buffer over-read into uninitialized memory CVE-2017-7890 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : kernel (ELSA-2018-0395)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0395 advisory. - x86 kvm: mmu: always terminate page walks at level 1 Paolo Bonzini 1500382 1500381 CVE-2017-12188 - x86 kvm: nVMX: update lastnonleaflevel when...