The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3200 advisory.

    - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943]     {CVE-2017-1000111}
    - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943]     {CVE-2017-1000111}
    - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
    - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340]     {CVE-2017-14106}
    - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
    - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
    - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and     ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
    - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and     ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
    - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959     1492961] {CVE-2017-1000253}
    - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961]     {CVE-2017-1000253}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : kernel (ELSA-2017-3200)

high Nessus Plugin ID 104617

Version 3.15