OracleVM 3.4 : kernel-uek (OVMSA-2021-0016)

The remote OracleVM system is missing necessary patches to address security updates: - In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

OracleVM 3.4 : sudo (OVMSA-2021-0012)

The remote OracleVM system is missing necessary patches to address security updates: - Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and a command-line argument that ends with a single...

OracleVM 3.4 : kernel-uek (OVMSA-2021-0008)

The remote OracleVM system is missing necessary patches to address security updates: - An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI...

OracleVM 3.4 : kernel-uek (OVMSA-2021-0005)

The remote OracleVM system is missing necessary patches to address security updates: - An issue was found in Linux kernel before 5.5.4. The mwifiexcmdappendvsietlv function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of...

OracleVM 3.4 : sudo (OVMSA-2021-0003)

The remote OracleVM system is missing necessary patches to address security updates: - Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and a command-line argument that ends with a single...

OracleVM 3.4 : kernel-uek (OVMSA-2021-0001)

The remote OracleVM system is missing necessary patches to address security updates: - A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0054)

The remote OracleVM system is missing necessary patches to address critical security updates : - qla2xxx: disable target reset during link reset and update version Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix early srb free on abort Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix comment in...

OracleVM 3.4 : net-snmp (OVMSA-2020-0052)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - fix CVE-2020-15862 1875960 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.4 : microcode_ctl (OVMSA-2020-0053)

The remote OracleVM system is missing necessary patches to address critical security updates : - recognize the 'force-intel' file path available on EL7+ orabug 31655792 - disable live load during %post due to UEK4 rendezvous timeouts orabug 31655792 - merge Oracle changes for early load via dracu...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0051)

The remote OracleVM system is missing necessary patches to address critical security updates : - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32137965 CVE-2020-8694 CVE-2020-8695 - Revert 'x86/efi: Initialize and display UEFI secure boot state a bit later during init' Eri...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0049)

The remote OracleVM system is missing necessary patches to address critical security updates : - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040806 CVE-2020-8694 CVE-2020-8695 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle...

OracleVM 3.4 : bind (OVMSA-2020-0045)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix tsig-request verify CVE-2020-8622 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0045. include'compat.inc'; if...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0044)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0044 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0044...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0041)

The remote OracleVM system is missing necessary patches to address critical security updates : - can: peakusb: pcanusbfd: Fix info-leaks to USB devices Tomas Bortoli Orabug: 31351221 CVE-2019-19535 - media: hdpvr: Fix an error handling path in hdpvrprobe Arvind Yadav Orabug: 31352053 CVE-2017-166...

OracleVM 3.4 : python (OVMSA-2020-0036)

The remote OracleVM system is missing necessary patches to address critical security updates : - Prefix dot in domain for proper subdomain validation C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0036...

OracleVM 3.4 : curl (OVMSA-2020-0035)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix TFTP small blocksize heap buffer overflow 462 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers - CVE-2016-8616 case insensitive password comparison -...

OracleVM 3.4 : xen (OVMSA-2020-0038)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=4e20c4a527d177048e77b2daa6201731fdcdc584 - BUILDINFO: QEMU upstream...

OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0039...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0032)

The remote OracleVM system is missing necessary patches to address critical security updates : - uek-rpm: Add OL6 shim conflict for new signing key Eric Snowberg Orabug: 31688239 - Revert 'certs: Add Oracle's new X509 cert into the kernel keyring' Eric Snowberg Orabug: 31688223 - blk-mq: don't...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0028)

The remote OracleVM system is missing necessary patches to address critical security updates : - ipv4: ipv4defaultadvmss should use route mtu Eric Dumazet Orabug: 31563095 - net: ipv4: Refine the ipv4defaultadvmss Gao Feng Orabug: 31563095 - Revert 'bnxten: Remove busy poll logic in the driver.'...