Detections
Analytics

OracleVM 2.2 : xen (OVMSA-2015-0059) (Venom)

high Nessus Plugin ID 83484

Language:

Synopsis

The remote OracleVM host is missing one or more security updates.

Description

The remote OracleVM system is missing necessary patches to address critical security updates :

 - force the fifo access to be in bounds of the allocated buffer This is XSA-133. [bug 21078975] (CVE-2015-3456)

Solution

Update the affected packages.

See Also

https://oss.oracle.com/pipermail/oraclevm-errata/2015-May/000310.html

Plugin Details

Severity: High

ID: 83484

File Name: oraclevm_OVMSA-2015-0059.nasl

Version: 2.16

Type: local

Published: 5/15/2015

Updated: 1/4/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.1

CVSS v2

Risk Factor: High

Base Score: 7.7

Temporal Score: 6.4

Vector: CVSS2#AV:A/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:oracle:vm:xen-tools, p-cpe:/a:oracle:vm:xen-pvhvm-devel, p-cpe:/a:oracle:vm:xen, cpe:/o:oracle:vm_server:2.2, p-cpe:/a:oracle:vm:xen-debugger, p-cpe:/a:oracle:vm:xen-devel, p-cpe:/a:oracle:vm:xen-64

Required KB Items: Host/local_checks_enabled, Host/OracleVM/release, Host/OracleVM/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/14/2015

Vulnerability Publication Date: 5/13/2015

Exploitable With

Core Impact

Reference Information

CVE: CVE-2015-3456

BID: 74640

IAVA: 2015-A-0112