The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2930 advisory.

    - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061]     {CVE-2017-14106}
    - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
    - [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355]     {CVE-2017-7558}
    - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
    - [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535]     {CVE-2017-1000112}
    - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and     ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
    - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010]     {CVE-2017-7542}
    - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010]     {CVE-2017-7542}
    - [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672     1435670] {CVE-2017-7184}
    - [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa)     [1435672 1435670] {CVE-2017-7184}
    - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789]     {CVE-2017-1000251}
    - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940]     {CVE-2017-1000111}
    - [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
    - [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126]     {CVE-2017-11176}
    - [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778     1474784] {CVE-2017-7541}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : kernel (ELSA-2017-2930)

high Nessus Plugin ID 104001

Version 3.16