The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-1871 advisory.

    [14:4.9.0-5]
    - Resolves: #1441597; use bigger capture buffer than in upstream

    [14:4.9.0-4]
    - Drop downstream patch (drop root privileges)
    - Add libcap-ng as a new build dependency
    - Related: #1262283

    [14:4.9.0-3]
    - Fix tests according to our patches and libpcap version

    [14:4.9.0-2]
    - Use getnameinfo instead of gethostbyaddr

    [14:4.9.0-1]
    - New upstream version 4.9.0. Resolves: #1422473
    - Add legacy -P switch with warning. Related to #1422473 and #1292056

    [14:4.5.1-6]
    - Drop root before creating any dump file. Resolves: #1262283

    [14:4.5.1-5]
    - Use -Q instead of -P to set capture direction. Resolves: #1292056

    [14:4.5.1-4]
    - Fix segfault with --help option. Resolves: #1297812

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : tcpdump (ELSA-2017-1871)

critical Nessus Plugin ID 102287

Version 3.7