The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-1270 advisory.

    [1:1.7.0.181-2.6.14.1.0.1]
    - Update DISTRO_NAME in specfile

    [1:1.7.0.181-2.6.14.1]
    - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
    - Resolves: rhbz#1559766

    [1:1.7.0.181-2.6.14.0]
    - Bump to 2.6.14 and u181b00.
    - Drop 8197981 Zero 32-bit patch now applied upstream.
    - Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
    - Resolves: rhbz#1559766

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2018-1270)

high Nessus Plugin ID 109440

Version 1.9