The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1297 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * It was found that the packet_set_ring() function of the Linux kernel's networking implementation did not     properly validate certain block-size data. A local attacker with CAP_NET_RAW capability could use this     flaw to trigger a buffer overflow, resulting in the crash of the system. Due to the nature of the flaw,     privilege escalation cannot be fully ruled out. (CVE-2017-7308, Important)

    * Mounting a crafted EXT4 image read-only leads to an attacker controlled memory corruption and SLAB-Out-     of-Bounds reads. (CVE-2016-10208, Moderate)

    * A flaw was found in the Linux kernel's implementation of seq_file where a local attacker could     manipulate memory in the put() function pointer. This could lead to memory corruption and possible     privileged escalation. (CVE-2016-7910, Moderate)

    * A vulnerability was found in the Linux kernel. An unprivileged local user could trigger oops in     shash_async_export() by attempting to force the in-kernel hashing algorithms into decrypting an empty data     set. (CVE-2016-8646, Moderate)

    Red Hat would like to thank Igor Redko (Virtuozzo kernel team) for reporting CVE-2016-8646.

    Bug Fix(es):

    * The kernel-rt packages have been upgraded to the 3.10.0-514 source tree, which provides a number of bug     fixes over the previous version. (BZ#1440807)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : kernel-rt (RHSA-2017:1297)

high Nessus Plugin ID 100455

Version 3.14