OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0145)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2848 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0145. include'deprecatednasllevel.inc...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0149) (Dirty COW)

The remote OracleVM system is missing necessary patches to address critical security updates : - mm: remove gupflags FOLLWRITE games from getuserpages Linus Torvalds Orabug: 24927306 CVE-2016-5195 - drivers/nvme: provide a module parameter for setting number of I/O queues Shan Hai Orabug: 2491495...

OracleVM 3.2 : openssl (OVMSA-2016-0141)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2182 - possible buffer overflow in BNbn2dec - fix CVE-2016-6306 - certificate messag...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0140)

The remote OracleVM system is missing necessary patches to address critical security updates : - net: add recursion limit to GRO Sabrina Dubroca Orabug: 24829133 CVE-2016-7039 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0138)

The remote OracleVM system is missing necessary patches to address critical security updates : - HID: hiddev: validate numvalues for HIDIOCGUSAGES, HIDIOCSUSAGES commands Scott Bauer Orabug: 24803597 CVE-2016-5829 - ocfs2: Fix start offset to ocfs2zerorangefortruncate Ashish Samant Orabug: 247902...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0139)

The remote OracleVM system is missing necessary patches to address critical security updates : - HID: hiddev: validate numvalues for HIDIOCGUSAGES, HIDIOCSUSAGES commands Scott Bauer Orabug: 24798695 CVE-2016-5829 - Revert 'rds: skip rx/tx work when destroying connection' Brian Maly Orabug:...

OracleVM 3.2 : bind (OVMSA-2016-0137)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2776 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0137. include'deprecatednasllevel.inc...

OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0136)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2776 - Updated named.ca hints file to the latest version 1267991 - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used 1227189 - Added the fixed tarball wit...

OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0135)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in DTLS - fix CVE-2016-2180 - OOB read in TSOBJprintbio -...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0134)

The remote OracleVM system is missing necessary patches to address critical security updates : - netfilter: xtables: make sure e-nextoffset covers remaining blob size Florian Westphal Orabug: 24682076 CVE-2016-4997 CVE-2016-4998 - netfilter: xtables: validate e-targetoffset early Florian Westphal...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0133)

The remote OracleVM system is missing necessary patches to address critical security updates : - Btrfs: fix truncation of compressed and inlined extents Ashish Samant Orabug: 22307285 CVE-2015-8374 - Btrfs: fix file corruption and data loss after cloning inline extents Divya Indi Orabug: 22307285...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0100)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0100 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : xen (OVMSA-2016-0104)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Andrew Cooper Subject: x86/shadow: Avoid overflowing shctxt-segreg hvmgetsegreg does not perform a range check on its input segment, calls hvmgetsegmentregister and writes straight into...

OracleVM 3.4 : xen (OVMSA-2016-0102)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: commit=a83239e012959a65503ebb44ee9c54620a9d78f5 - evtchn-fifo: prevent use after free Boris Ostrovsky CVE-2016-7154 - x86/segment: Bounds check accesses to emulation ctxt-segreg Andrew Coop...

OracleVM 3.3 : xen (OVMSA-2016-0103)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Andrew Cooper Subject: x86/shadow: Avoid overflowing shctxt-segreg hvmgetsegreg does not perform a range check on its input segment, calls hvmgetsegmentregister and writes straight into...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0097)

The remote OracleVM system is missing necessary patches to address critical security updates : - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010103 Orabug: 2401010 CVE-2016-5696 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0098)

The remote OracleVM system is missing necessary patches to address critical security updates : - tcp: make challenge acks less predictable Eric Dumazet Orabug: 24010012 Orabug: 2401010 CVE-2016-5696 - ocfs2: call ocfs2journalaccessdi before ocfs2journaldirty in ocfs2writeendnolock yangwenfang...

OracleVM 3.3 / 3.4 : python (OVMSA-2016-0099) (httpoxy)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle Linux distribution in platform.py orabug 21288328 Keshav Sharma - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359161 - Fix for CVE-2016-0772 python: smtplib StartTLS stripping...

OracleVM 3.4 : qemu-kvm (OVMSA-2016-0096)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.pat ch bz1359724 - Resolves: bz1359724 EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0095)

The remote OracleVM system is missing necessary patches to address critical security updates : - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393864 CVE-2016-4470 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM...