The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2679 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * A stack buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed     pending L2CAP configuration responses from a client. On systems with the stack protection feature enabled     in the kernel (CONFIG_CC_STACKPROTECTOR=y, which is enabled on all architectures other than s390x and     ppc64[le]), an unauthenticated attacker able to initiate a connection to a system via Bluetooth could use     this flaw to crash the system. Due to the nature of the stack protection feature, code execution cannot be     fully ruled out, although we believe it is unlikely. On systems without the stack protection feature     (ppc64[le]; the Bluetooth modules are not built on s390x), an unauthenticated attacker able to initiate a     connection to a system via Bluetooth could use this flaw to remotely execute arbitrary code on the system     with ring 0 (kernel) privileges. (CVE-2017-1000251, Important)

    Red Hat would like to thank Armis Labs for reporting this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : kernel (RHSA-2017:2679)

high Nessus Plugin ID 103167

Version 3.18