OracleVM 3.2 : bind (OVMSA-2017-0034)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-9147 ISC change 4510 - Fix regression introduced by CVE-2016-8864 ISC change 4530 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted fro...

OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0033)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-9147 ISC change 4510 - Fix regression introduced by CVE-2016-8864 ISC change 4530 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted fro...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0005)

The remote OracleVM system is missing necessary patches to address critical security updates : - net: avoid signed overflows for SOSND|RCVBUFFORCE Eric Dumazet Orabug: 25203623 CVE-2016-9793 - nvme: Limit command retries Ashok Vairavan Orabug: 25374794 - tcp: fix use after free in...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0004)

The remote OracleVM system is missing necessary patches to address critical security updates : - KEYS: Fix short sprintf buffer in /proc/keys show function David Howells Orabug: 25306361 CVE-2016-7042 - nvme: Limit command retries Keith Busch Orabug: 25374751 - fs/proc/taskmmu.c: fix mmaccess mod...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0006)

The remote OracleVM system is missing necessary patches to address critical security updates : - nvme: Limit command retries Ashok Vairavan Orabug: 25342947 - tcp: fix use after free in tcpxmitretransmitqueue Eric Dumazet Orabug: 25374376 CVE-2016-6828 - ALSA: pcm : Call killfasync in stream lock...

OracleVM 3.3 : xen (OVMSA-2017-0008)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Andrew Cooper Date: Sun, 18 Dec 2016 15:42:59 +0000 Subject: PATCH x86/emul: Correct the handling of eflags with SYSCALL A singlestep DB is determined by the resulting eflags value from the...

OracleVM 3.4 : xen (OVMSA-2017-0007)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=9f3030e391274b89deb80c86a6343dac473916b3 - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca - BUILDINFO: QEMU traditional...

OracleVM 3.2 : xen (OVMSA-2017-0009)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Jan Beulich Subject: x86: force EFLAGS.IF on when exiting to PV guests Guest kernels modifying instructions in the process of being emulated for another of their vCPU-s may effect EFLAGS.IF to b...

OracleVM 3.3 / 3.4 : ghostscript (OVMSA-2017-0002)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added security fixes for : - CVE-2013-5653 bug 1380327 - CVE-2016-7977 bug 1380415 - CVE-2016-7979 bug 1382305 - CVE-2016-8602 bug 1383940 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

OracleVM 3.3 / 3.4 : vim (OVMSA-2016-0182)

The remote OracleVM system is missing necessary patches to address critical security updates : - add fix for CVE-2016-1248 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0182...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2016-0181)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 25269184 CVE-2016-3157 - net: Fix use after free in the recvmmsg exit path Arnaldo Carvalho de Melo Orabug: 25298618...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0179)

The remote OracleVM system is missing necessary patches to address critical security updates : - net: Fix use after free in the recvmmsg exit path Arnaldo Carvalho de Melo Orabug: 25298601 CVE-2016-7117 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0180)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 25269176 CVE-2016-3157 CVE-2016-3157 - net: Fix use after free in the recvmmsg exit path Arnaldo Carvalho de Melo Orabug:...

OracleVM 3.3 : xen (OVMSA-2016-0177)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Jan Beulich Subject: x86emul: CMPXCHG8B ignores operand size prefix Otherwise besides mis-handling the instruction, the comparison failure case would result in uninitialized stack data being...

OracleVM 3.4 : xen (OVMSA-2016-0176)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: commit=c9d295a8e909c45a5e1d9fb5ef2c2ed0df1e871a - libxl: Remove redundant setting of phyical-device George Dunlap - BUILDINFO: commit=8669823eab47b0fa3ae9a7f8fa5ef45874582559 - x86emul:...

OracleVM 3.2 : xen (OVMSA-2016-0178)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Jan Beulich Subject: x86emul: CMPXCHG8B ignores operand size prefix Otherwise besides mis-handling the instruction, the comparison failure case would result in uninitialized stack data being...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0175)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert 'i40e: Set defport behavior for the Main VSI when in promiscuous mode' Jack Vogel Orabug: 22683573 - mlx4: avoid multiple free on idmapent Wengang Wang - xen-netfront: cast grant table referenc...

OracleVM 3.2 : xen (OVMSA-2016-0172)

The remote OracleVM system is missing necessary patches to address critical security updates : - qemu: ioportread, ioportwrite: be defensive about 32-bit addresses On x86, ioport addresses are 16-bit. That these functions take 32-bit arguments is a mistake. Changing the argument type to 16-bit wi...

OracleVM 3.4 : xen (OVMSA-2016-0173)

The remote OracleVM system is missing necessary patches to address critical security updates : - qemu: ioportread, ioportwrite: be defensive about 32-bit addresses master XSA-199 OraBug: 25119498 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0174)

The remote OracleVM system is missing necessary patches to address critical security updates : - ocfs2: fix trans extend while free cached blocks Junxiao Bi - ocfs2: fix trans extend while flush truncate log Junxiao Bi - ocfs2: extend enough credits for freeing one truncate record while replaying...