Oracle Linux 8 : php:7.2 (ELSA-2020-1624)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1624 advisory. - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpcdecode can allow a hostile XMLRPC...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5753)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5753 advisory. - media: ttusb-dec: Fix info-leak in ttusbdecsendcommand Tomas Bortoli Orabug: 31351121 CVE-2019-19533 - can: peakusb: fix slab info leak Johan...

Oracle Linux 8 : exiv2 (ELSA-2020-1577)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1577 advisory. exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available...

Oracle Linux 7 : qemu (ELSA-2018-4262)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4262 advisory. - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28762625 CVE-2018-17963 - pcnet: fix possible buffer overflow Jason Wang Orabug:...

Oracle Linux 7 : qemu (ELSA-2019-4585)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4585 advisory. - usb-mtp: use ONOFOLLOW and OCLOEXEC. Gerd Hoffmann Orabug: 29216656 CVE-2018-16872 - pvrdma: add uarread routine Prasad J Pandit Orabug: 29216658...

Oracle Linux 5 : kernel (ELSA-2018-0292)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-0292 advisory. - Backport CVEs to RHCK/OL5 orabug 27547712 CVE-2017-5753 CVE-2017-5754 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : ELSA-2017-0933-1: / kernel (ELSA-2017-09331)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-09331 advisory. - The mpipowm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows...

Oracle Linux 5 : ELSA-2016-0045-1: / kernel (ELSA-2016-00451)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-00451 advisory. - The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote...

Oracle Linux 5 : ELSA-2013-0594-1: / kernel (ELSA-2013-05941)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-05941 advisory. - Heap-based buffer overflow in the udfloadlogicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of...

Oracle Linux 5 : ELSA-2013-0621-1: / kernel (ELSA-2013-06211)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-06211 advisory. - Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACESETREGS ptrace system...

Oracle Linux 5 : ELSA-2012-0480-1: / kernel (ELSA-2012-04801)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-04801 advisory. - Double free vulnerability in the xfrm6tunnelrcv function in net/ipv6/xfrm6tunnel.c in the Linux kernel before 2.6.22, when the xfrm6tunnel module is enabled,...

Oracle Linux 8 : container-tools:1.0 (ELSA-2019-3494)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3494 advisory. - ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...

Oracle Linux 5 : httpd (ELSA-2007-0746)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0746 advisory. - add security fix for CVE-2007-3847 250761 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : glibc (ELSA-2020-1828)

"The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1828 advisory. 2.28-101.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug:...

Oracle Linux 9 : firefox (ELSA-2023-4958)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4958 advisory. 102.15.0-1.0.1 - Update to 102.15.0 build2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 : nss_ldap (ELSA-2008-0389)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0389 advisory. 253-12 - rebuild 253-11 - backport changes to group parsing from version 254 to fix heap corruption when parsing nested groups 444031 253-10 - remove unnecessar...

Oracle Linux 5 : coolkey (ELSA-2007-0631)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0631 advisory. 1.1.0-5 - 1777 is not octal and does not set the correct bits should be 01777 1.1.0-4 - fix cache location to be more secure 1.1.0-3 - replace the install stuff...

Oracle Linux 5 : pam (ELSA-2007-0555)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0555 advisory. - CVE-2007-3102 - prevent audit log injection through user name 243204 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : evolution (ELSA-2019-3699)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3699 advisory. - Add patch related to evolution-ews CVE-2019-3890 RH bug 1696763 evolution-ews Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 7 : unzip (ELSA-2020-1181)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1181 advisory. - Fix CVE-2019-13232 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...