134 matches found
Photon OS 2.0: Linux PHSA-2017-2.0-0008
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-2.0-0008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121792...
Oracle Solaris Critical Patch Update : oct2018_SRU11_4_0_0_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon RAD. The supported version that is affected is 11.3. Easily exploitable vulnerability...
Oracle Database Server CVE-2018-3110
The remote Oracle Database Server is missing patches. It is, therefore, affected by CVE-2018-3110. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
OracleVM 3.3 : Unbreakable / etc (OVMSA-2018-0237)
The remote OracleVM system is missing necessary patches to address critical security updates : - dm: fix race between dmgetfromkobject and dmdestroy Hou Tao CVE-2017-18203 - drm: udl: Properly check framebuffer mmap offsets Greg Kroah-Hartman Orabug: 27986407 CVE-2018-8781 - kernel/exit.c: avoid...
OracleVM 3.4 : qemu-kvm (OVMSA-2018-0238) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018 -3639.patch - qemu-kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-i t-CVE.patch - qemu-kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit...
OracleVM 3.4 : xen (OVMSA-2018-0221)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=5ee0a217664a1fde547afa506e92e4998ed26699 - BUILDINFO: QEMU upstream...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0040)
The remote OracleVM system is missing necessary patches to address critical security updates : - vhost/scsi: fix reuse of &vq-iovout in response Benjamin Coddington Orabug: 27928330 - kernel.spec: add requires system-release for OL7 Brian Maly - x86/kernel/traps.c: fix tracedienotifier return val...
OracleVM 3.4 : xen (OVMSA-2018-0028) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=bf523bc61677448cb7bb79980d6969896d005bd5 - BUILDINFO: QEMU upstream...
OracleVM 3.4 : xen (OVMSA-2018-0021) (Meltdown) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=b2a6db11ced11291a472bc1bda20ce329eda4d66 - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff - BUILDINFO: QEMU traditional...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0010) (Meltdown) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - x86/pti/efi: broken conversion from efi to kernel page table Pavel Tatashin Orabug: 27363926 Orabug: 27352353 CVE-2017-5754 - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT red...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0002)
The remote OracleVM system is missing necessary patches to address critical security updates : - fuse: Call endqueuedrequests after releasing fc-lock in fusedevrelease Ashish Samant Orabug: 26431550 - rds: Fix inaccurate accounting of unsignaled wrs in rdsibxmitrdma Hå kon Bugge Orabug:...
OracleVM 3.4 : xen (OVMSA-2017-0166)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=6c164f71ed0dc46201f1d69de65d05d138556fcc - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff - BUILDINFO: QEMU traditional...
OracleVM 3.2 / 3.3 / 3.4 : xen (OVMSA-2017-0162)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=41067cbb7a1ecab6aa2ca0d8d40a4c9f36c5e76e - BUILDINFO: QEMU upstream...
OracleVM 3.4 : xen (OVMSA-2017-0157)
The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=7590623eeb64d8a8f733c24eb80818f86eb870f0 - BUILDINFO: QEMU upstream...
OracleVM 3.4 : nss (OVMSA-2017-0154)
The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Backport patch to simplify transcript calculation for CertificateVerify %NASLMINLEVEL...
GLSA-201709-02 : Binutils: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201709-02 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review References for additional information. Impact : A remote attacker, by enticing a user to compile/execute a...
OracleVM 3.2 : xen (OVMSA-2017-0149)
The remote OracleVM system is missing necessary patches to address critical security updates : - From e26560a4b056dad6d85ffd9ebfad9565f210a9cc Mon Sep 17 00:00:00 2001 From: Jan Beulich Date: Wed, 30 May 2012 09:22:17 +0100 Subject: PATCH gnttab: don't use domain lock for serialization Instead us...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0143)
The remote OracleVM system is missing necessary patches to address critical security updates : - dentry name snapshots Al Viro Orabug: 26630936 CVE-2017-7533 - scsi: libiscsi: use kvzalloc for iscsipoolinit Kyle Fortin - mm: introduce kvmzalloc helpers Kyle Fortin Orabug: 26621191 - KEYS: Disallo...
OracleVM 3.2 : sudo (OVMSA-2017-0125)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2017-1000368 - Fix CVE-2017-1000367 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2017-0125...
smb2-vuln-uptime NSE Script
Attempts to detect missing patches in Windows systems by checking the uptime returned during the SMB2 protocol negotiation. SMB2 protocol negotiation response returns the system boot time pre-authentication. This information can be used to determine if a system is missing critical patches without...