Oracle Linux 7 : giflib (ELSA-2024-12825)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12825 advisory. 4.1.6-9.0.1 - Fixes giflib CVE-2023-48161 issue Orabug: 37178930 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : cups-filters (ELSA-2024-7553)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-7553 advisory. 1.0.35-29.0.3 - Unsupport cups-browsed service - CVE-2024-47076, CVE-2024-47175, CVE-2024-47176 Orabug: 37217141 Tenable has extracted the preceding...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12814)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12814 advisory. - filelock: Fix fcntl/close race recovery compat path Jann Horn Orabug: 36874759 CVE-2024-41012 CVE-2024-41020 - jfs: don't walk off the end of ealist...

Oracle Linux 7 : NetworkManager-libreswan (ELSA-2024-8357)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8357 advisory. 1.2.4-2.0.1 - Fix improper escaping of Libreswan configuration CVE-2024-9050Orabug: 37206712 Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : firefox (ELSA-2024-8727)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-8727 advisory. 128.4.0-1.0.1 - Update to 128.4.0 build1 Orabug: 37236498CVE-2024-10458CVE-2024-10459 CVE-2024-10460CVE-2024-10461CVE-2024-10462CVE-2024-10463...

Oracle Linux 7 : firefox (ELSA-2024-8034)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8034 advisory. 128.3.1-2.0.1 - Update to 128.3.1 Orabug: 37168934 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 7 : firefox (ELSA-2024-7702)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-7702 advisory. 128.3.0-1.0.1 - Update to 128.3.0 Orabug: 37139909 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 : firefox (ELSA-2024-6838)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-6838 advisory. 128.2.0-1.0.1 - Remove nomerge annotation from abort calls Orabug: 37079143 - Update to 128.2.0 Orabug: 37079143 Tenable has extracted the preceding...

Oracle Linux 7 / 8 / 9 : linux-firmware (ELSA-2024-12797)

The remote Oracle Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12797 advisory. 20241003-999.35.git95bfe086.el8 - Rebase to latest upstream Orabug: 37132142 - Fix build error in ol7 due to linking in copy-firmware.sh Orabu...

Oracle Linux 7 : edk2 (ELSA-2024-12794)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-12794 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

Oracle Linux 7 : edk2 (ELSA-2024-12793)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-12793 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

Oracle Linux 7 : 389-ds-base (ELSA-2024-7434)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7434 advisory. 1.3.11.1-5.0.3 - Security fix for CVE-2024-8445 Orabug: 37119399CVE-2024-8445 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : httpd (ELSA-2024-7101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7101 advisory. 2.4.6-99.0.5.1 - Differentiate trusted sources Orabug: 37100272CVE-2024-38476 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : python-setuptools (ELSA-2024-6662)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6662 advisory. 0.9.8-7.0.1 - Fixes CVE-2024-6345 security issue Orabug: 37054994 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12780)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12780 advisory. - VMCI: Fix use-after-free when removing resource in vmciresourceremove David Fernandez Gonzalez Orabug: 37037205 CVE-2024-46738 - exec: Fix ToCTo...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12779)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12779 advisory. - driver core: Fix ueventshow vs driver detach race Dan Williams Orabug: 37029154 CVE-2024-44952 - VMCI: Fix use-after-free when removing resource in...

Oracle Linux 7 : systemd (ELSA-2024-7705)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7705 advisory. 219-78.0.17 - Backport secure pager invocation for CVE-2023-26604 Orabug: 37139943 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 7 : e2fsprogs (ELSA-2024-12730)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12730 advisory. - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304 - Fix potential buffer overflow in closefs 1193947,...

Oracle Linux 7 : e2fsprogs (ELSA-2024-12731)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12731 advisory. 1.45.4-3.0.7.el7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304 Tenable has extracted the preceding...

Oracle Linux 7 : python3-setuptools (ELSA-2024-6661)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6661 advisory. 39.2.0-10.0.3 - Back port fix for CVE-2024-6345 Orabug: 37054771 Tenable has extracted the preceding description block directly from the Oracle Linux security...