The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2794 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was     built as Position Independent Executable (PIE), the loader could allow part of that application's data     segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An     unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to     escalate their privileges on the system. (CVE-2017-1000253, Important)

    Red Hat would like to thank Qualys Research Labs for reporting this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : kernel (RHSA-2017:2794)

high Nessus Plugin ID 103493

Version 3.14