OracleVM 3.3 : gnutls (OVMSA-2016-0004)

The remote OracleVM system is missing necessary patches to address critical security updates : - Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange 1289885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...

OracleVM 3.3 : rpcbind (OVMSA-2016-0002)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix memory corruption in PMAPCALLIT code bz 1283638 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-000...

OracleVM 3.3 : openssl (OVMSA-2016-0001) (SLOTH)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2 - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter - fix CVE-2015-3195 - X509ATTRIBUTE memory leak - fix CVE-2015-3196 - race...

OracleVM 3.3 : bind (OVMSA-2015-0156)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2015-8000 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2015-0156. include'deprecatednasllevel.inc...

OracleVM 3.3 : openssl (OVMSA-2015-0155)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter - fix CVE-2015-3195 - X509ATTRIBUTE memory leak - fix CVE-2015-3196 - race condition when handling PSK identity hint %NASLMINLEV...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0154)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: svm: unconditionally intercept DB Paolo Bonzini Orabug: 22333698 CVE-2015-8104 - KVM: x86: work around infinite loop in microcode when AC is delivered Eric Northup Orabug: 22333689 CVE-2015-5307...

OracleVM 3.3 : libpng (OVMSA-2015-0153)

The remote OracleVM system is missing necessary patches to address critical security updates : - Security fix for CVE-2015-7981, CVE-2015-8126 - Resolves: 1283572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 2.2 : xen (OVMSA-2015-0151)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix-up bad changelog dates - guard against undue super page PTE creation XSA-148 Jan Beulich %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from...

OracleVM 3.3 : libxml2 (OVMSA-2015-0152)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball - Fix a series of CVEs rhbz1286495 - CVE-2015-7941 Cleanup conditional section error handling -...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0150)

The remote OracleVM system is missing necessary patches to address critical security updates : - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22277382 CVE-2015-7613 - ipc: fix msg newqueue add Guru Anbalagane Orabug: 22277382 CVE-2015-7613 - sctp: fix race ...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0147)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0147 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : xen (OVMSA-2015-0143)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86: rate-limit logging in doxenoprof,pmuop Some of the sub-ops are acessible to all guests, and hence should be rate-limited. In the xenoprof case, just like for XSA-146, include them only in debug...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0144)

The remote OracleVM system is missing necessary patches to address critical security updates : - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145600 CVE-2015-5156 - netdev: fix NETIFFGSOUDPTUNNELBIT enum shift in i40e driver import Todd Vierling Orabug: 22066176 - xen/blkfront: remove...

OracleVM 3.3 : nss / nss-util,nspr (OVMSA-2015-0145)

The remote OracleVM system is missing necessary patches to address critical security updates : nspr - Resolves: Bug 1269360 - CVE-2015-7183 - nspr: heap-buffer overflow in PLARENAALLOCATE can lead to crash under ASAN, potential memory corruption nss - Added nss-vendor.patch to change vendor -...

OracleVM 3.3 : xen (OVMSA-2015-0141)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86: rate-limit logging in doxenoprof,pmuop Some of the sub-ops are acessible to all guests, and hence should be rate-limited. In the xenoprof case, just like for XSA-146, include them only in debug...

OracleVM 3.2 : xen (OVMSA-2015-0142)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0142 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.3 : ntp (OVMSA-2015-0140)

The remote OracleVM system is missing necessary patches to address critical security updates : - check origin timestamp before accepting KoD RATE packet CVE-2015-7704 - allow only one step larger than panic threshold with -g CVE-2015-5300 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

OracleVM 3.3 : openldap (OVMSA-2015-0123)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263171 - fix: nslcd segfaults due to incorrect mutex initialization 1144294 - fix: Updating openldap deletes database if slapd.conf ...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0122)

The remote OracleVM system is missing necessary patches to address critical security updates : - sctp: fix ASCONF list handling Marcelo Ricardo Leitner Orabug: 21842668 CVE-2015-3212 - KEYS: ensure we free the assoc array edit if edit is valid Colin Ian King Orabug: 21842655 CVE-2015-1333 -...

OracleVM 3.3 : libXfont (OVMSA-2015-0120)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-1802: missing range check in bdfReadProperties bug 1258892 - CVE-2015-1803: crash on invalid read in bdfReadCharacters bug 1258892 - CVE-2015-1804: out-of-bounds memory access in...