OracleVM 3.4 : xen (OVMSA-2017-0116)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=74b662e79bc874fe8ad8a93d2891e6569c380004 - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff - BUILDINFO: QEMU traditional...

OracleVM 3.2 : xen (OVMSA-2017-0118)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0118 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.4 : xen (OVMSA-2017-0094)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=8ee9cbea8e71c968e602d5b4974601d283d61d28 - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335 - BUILDINFO: QEMU traditional...

Sherlock - Tool to find missing Windows patches for Local Privilege Escalation Vulnerabilities

PowerShell script to quickly find missing Microsoft patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool Overflow MS13-081 : TrackPopupMenuEx Win32k NULL Page...

OracleVM 3.3 / 3.4 : curl (OVMSA-2017-0059)

The remote OracleVM system is missing necessary patches to address critical security updates : - treat Negotiate authentication as connection-oriented CVE-2017-2628 - fix a bug in DNS caching code that causes a memory leak 1302893 - SSH: make CURLOPTSSHPUBLICKEYFILE treat '' as NULL 1260742 - use...

OracleVM 3.3 / 3.4 : bash (OVMSA-2017-0050)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix signal handling in read builtin Resolves: 1421926 - CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: 1396383 - CVE-2016-7543 - Fix for arbitrary code execution via...

OracleVM 3.3 / 3.4 : ocaml (OVMSA-2017-0049)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable execshield stack protection on ppc/ppc64 572826 related: rhbz1343082 - Fix strict-aliasing warnings in build 990540. - Fix buffer overflow and information leak CVE-2015-8869 resolves: rhbz13430...

OracleVM 3.4 : qemu-kvm (OVMSA-2017-0043)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-cirrusvga-fix-division-by-0-for-color-expansion-rop .patch - kvm-cirrusvga-fix-off-by-one-in-blitregionisunsafe.p atch - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.pa tch -...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0041)

The remote OracleVM system is missing necessary patches to address critical security updates : - vfs: read filehandle only once in handletopath Sasha Levin Orabug: 25388709 CVE-2015-1420 - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417807 - USB: usbfs: fi...

Windows Exploit Suggester

Windows Exploit Suggester This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. Windows...

OracleVM 3.2 : xen (OVMSA-2016-0178)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Jan Beulich Subject: x86emul: CMPXCHG8B ignores operand size prefix Otherwise besides mis-handling the instruction, the comparison failure case would result in uninitialized stack data being...

OracleVM 3.2 : bind (OVMSA-2016-0137)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2776 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0137. include'deprecatednasllevel.inc...

OracleVM 3.2 : openssl (OVMSA-2016-0086)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2016-0799 - Fix memory issues in BIOprintf functions - CVE-2016-2105 - Avoid overflow in EVPEncodeUpdate - CVE-2016-2106 - Fix encrypt overflow - CVE-2016-2109 - Harden ASN.1 BIO handling of large...

OracleVM 3.3 : kernel-uek (OVMSA-2016-0084)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert 'x8664: expand kernel stack to 16K' Chuck Anderson Orabug: 23608686 - megaraidsas : Update threshold based reply post host index register Orabug: 23562756 - xen/events: Don't move disabled irqs...

OracleVM 3.2 : rpm (OVMSA-2016-0077)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add missing files in /usr/share/doc/ - Fix warning when applying the patch for 1163057 - Fix race condidition where unchecked data is exposed in the file system CVE-2013-64351163057 - Fix segfault on...

OracleVM 3.2 : sudo (OVMSA-2016-0079)

The remote OracleVM system is missing necessary patches to address critical security updates : - added patch for CVE-2014-0106: certain environment variables not sanitized when envreset is disabled Resolves: rhbz1072210 - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-277...

OracleVM 3.3 / 3.4 : file (OVMSA-2016-0050)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2014-3538 unrestricted regular expression matching - fix 1284826 - try to read ELF header to detect corrupted one - fix 1263987 - fix bugs found by coverity in the patch - fix CVE-2014-3587...

OracleVM 3.3 : kernel-uek (OVMSA-2016-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - skbuff: skbsegment: orphan frags before copying Dongli Zhang - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE Venkat Venkatsubra Orabug: 22888920 - mlx4core: Introduce...

OracleVM 3.2 : kernel-uek (OVMSA-2016-0037)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0037 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.3 : ntp (OVMSA-2016-0006)

The remote OracleVM system is missing necessary patches to address critical security updates : - don't accept server/peer packets with zero origin timestamp CVE-2015-8138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...