Detections
Analytics
OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0266)
high Nessus Plugin ID 118052
Language:
Synopsis
The remote OracleVM host is missing one or more security updates.Description
The remote OracleVM system is missing necessary patches to address critical security updates :- bnxt_en: xdp: don't make drivers report attachment mode (partial backport) (Somasundaram Krishnasamy) [Orabug:
27988326]
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov)
- bnxt_en: add meta pointer for direct access (partial backport) (Somasundaram Krishnasamy) [Orabug: 27988326]
- bnxt_en: Fix bug in ethtool -L. (Michael Chan) [Orabug:
27988326]
- bpf: bnxt: Report bpf_prog ID during XDP_QUERY_PROG (Martin KaFai Lau) [Orabug: 27988326]
- bnxt_en: Optimize doorbell write operations for newer chips (reapply). (Michael Chan) [Orabug: 27988326]
- bnxt_en: Use short TX BDs for the XDP TX ring. (Michael Chan)
- bnxt_en: Add ethtool mac loopback self test (reapply).
(Michael Chan)
- bnxt_en: Add support for XDP_TX action. (Michael Chan) [Orabug: 27988326]
- bnxt_en: Add basic XDP support. (Michael Chan) [Orabug:
27988326]
- x86/ia32: Restore r8 correctly in 32bit SYSCALL instruction entry. (Gayatri Vasudevan) [Orabug:
28529706]
- net: enable RPS on vlan devices (Shannon Nelson) [Orabug: 28645929]
- xen-blkback: hold write vbd-lock while swapping the vbd (Ankur Arora)
- xen-blkback: implement swapping of active vbd (Ankur Arora) [Orabug: 28651655]
- xen-blkback: emit active physical device to xenstore (Ankur Arora)
- xen-blkback: refactor backend_changed (Ankur Arora) [Orabug: 28651655]
- xen-blkback: pull out blkif grant features from vbd (Ankur Arora)
- mm: get rid of vmacache_flush_all entirely (Linus Torvalds) [Orabug: 28701016] (CVE-2018-17182)
- rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra) [Orabug: 28506569]
- IB/core: For multicast functions, verify that LIDs are multicast LIDs (Michael J. Ruhl) [Orabug: 28700490]
Solution
Update the affected kernel-uek / kernel-uek-firmware packages.See Also
Plugin Details
Severity: High
ID: 118052
File Name: oraclevm_OVMSA-2018-0266.nasl
Version: 1.5
Type: local
Family: OracleVM Local Security Checks
Published: 10/11/2018
Updated: 7/31/2024
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2018-17182
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:oracle:vm:kernel-uek, cpe:/o:oracle:vm_server:3.4, p-cpe:/a:oracle:vm:kernel-uek-firmware
Required KB Items: Host/local_checks_enabled, Host/OracleVM/release, Host/OracleVM/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/10/2018
Vulnerability Publication Date: 9/19/2018
Reference Information
CVE: CVE-2018-17182