Oracle Linux 7 : qemu (ELSA-2019-4556)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4556 advisory. - A flaw was found in qemu Media Transfer Protocol MTP before version 3.1.0. A path traversal in the in usbmtpwritedata function in hw/usb/dev-mtp.c du...

Oracle Linux 5 : bind (ELSA-2008-0300)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0300 advisory. - CVE-2008-0122 small buffer overflow in inetnetwork - CVE-2007-6283 419421 Tenable has extracted the preceding description block directly from the...

Oracle Linux 7 : net-snmp (ELSA-2020-1081)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1081 advisory. - fix for CVE-2018-18066 1638911 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Oracle Linux 7 : unoconv (ELSA-2020-3944)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-3944 advisory. 0.6-8 - Resolves: rhbz1803831 CVE-2019-17400 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : mod_auth_mellon (ELSA-2019-3421)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3421 advisory. - Resolves: rhbz1692471 - CVE-2019-3877 appstream/modauthmellon: open redirect in logout url when using URLs with backslashes rhel-8 - Resolves: rhbz1692471 -...

Oracle Linux 8 : dbus (ELSA-2019-3707)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3707 advisory. 1.12.8-9.0.1 - fix netlink poll: error 4 Zhenzhong Duan 1:1.12.8-9 - Ensure that patches are applied 1725570 1:1.12.8-8 - Fix CVE-2019-12749 1725570 Tenable has...

Oracle Linux 7 : ovmf (ELSA-2019-2125)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2125 advisory. - Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing atta...

Oracle Linux 7 : texlive (ELSA-2020-1036)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1036 advisory. 2:2012-45.20130427r30134 - Related: 1650521, buffer overflow in t1checkunusualcharstring function 2:2012-44.20130427r30134 - Resolves: 1650521, buffer overflow ...

Oracle Linux 8 : bluez (ELSA-2021-4432)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4432 advisory. 5.56-1 + bluez-5.56-1 - Fixing 1965057 - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 Tenable has extracted the preceding...

Oracle Linux 7 : qt (ELSA-2020-1172)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1172 advisory. 1:4.8.7-8 - Fix QImage allocation failure in qgifhandler Resolves: bz1667863 - Fix QTgaFile CPU exhaustion Resolves: bz1667879 - Fix QBmpHandler...

Oracle Linux 6 : openssl-fips (ELSA-2016-3571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3571 advisory. 1.0.1t-2.0.1 - update to upstream 1.0.1t - Original 1.0.1 test certificates has expired on May 10, 2016. Updated certificatea were copied from 1.0.2h...

Oracle Linux 7 : opensc (ELSA-2019-2154)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2154 advisory. 0.19.0-3 - Make OpenSC multilib also on s390 and ppc arches 0.19.0-2 - Make OpenSC multilib again by moving the conflicting files on ix86 arch 0.19.0-1...

Oracle Linux 7 : evolution (ELSA-2020-1080)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1080 advisory. - Update patch for RH bug 1686408 CVE-2018-15587: Reposition signature bar - Add patch for RH bug 1686408 CVE-2018-15587: Reposition signature bar - Ad...

Oracle Linux 7 : libvirt (ELSA-2020-5720)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5720 advisory. 5.7.0-15.el7 - qemu: Escape the qemu driver systemd DOT hoax Wim ten Have Orabug: 31380815 5.7.0-14.el7 - vmx: make 'fileName' optional for CD-ROMs Pino Toscano...

Oracle Linux 7 : gvfs (ELSA-2019-2145)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2145 advisory. 1.36.2-3 - Force NT1 protocol version for workgroup support 1619719 1.36.2-2 - Prevent spawning new daemons if outgoing operation exists 1632960 - CVE-2019-3827...

Oracle Linux 6 : glibc (ELSA-2011-1526)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1526 advisory. - Report write error in addmnt even for cached streams 688980, CVE-2011-1089 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : libreswan (ELSA-2019-3391)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-3391 advisory. 3.29-6.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 3.29-6 - Resolves: rhbz1714331 support NSS based IKE KDFs require updated nss for rhbz...

Oracle Linux 5 : ELSA-2015-0164-1: / kernel (ELSA-2015-01641)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-01641 advisory. - The implementation of certain splicewrite file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file...

Oracle Linux 5 : pam_krb5 (ELSA-2010-0258)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0258 advisory. - dont vary the password prompt depending on whether or not the user exists or is known to the KDC CVE-2009-1384, 505265 Tenable has extracted the preceding...

Oracle Linux 8 : liblouis (ELSA-2020-1708)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1708 advisory. - Apply patch for CVE-2018-12085 1589942 - Fix CVE-2018-11577 1585906 - Fix CVE-2018-11684 1588632 - Fix CVE-2018-11685 1588637 Tenable has extracted t...