The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2384 advisory.

  - The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to     cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system     calls. (CVE-2018-10675)

  - Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and     tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service. (CVE-2018-5390)

  - Systems with microprocessors utilizing speculative execution and address translations may allow     unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access     via a terminal page fault and a side-channel analysis. (CVE-2018-3620)

  - Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized     disclosure of information to an attacker with local user access via a speculative buffer overflow and     side-channel analysis. (CVE-2018-3693)

  - The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation     to /dev/snd/seq by a local user. (CVE-2018-7566)

  - Systems with microprocessors utilizing speculative execution and address translations may allow     unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access     with guest OS privilege via a terminal page fault and a side-channel analysis. (CVE-2018-3646)

  - A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions:
    Android kernel. Android ID: A-64386293. References: Upstream kernel. (CVE-2017-13215)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : kernel (ELSA-2018-2384)

high Nessus Plugin ID 111723

Version 1.11