The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2429 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for     the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other     unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
    (CVE-2017-7895, Important)

    Red Hat would like to thank Ari Kauppi for reporting this issue.

    Bug Fix(es):

    * If a VFC port became unmapped in the VIOS, it sometimes did not respond with a CRQ init complete     following the H_REG_CRQ() call. As a consequence, scsi_block_requests were called until the init complete     occurred. If not, I/O requests were hung. The provided patch ensures the host action stays set to     IBMVFC_HOST_ACTION_TGT_DEL so that all rports are moved into devloss state unless an init complete is     received. (BZ#1460210)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : kernel (RHSA-2017:2429)

critical Nessus Plugin ID 102305

Version 3.11