The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-2942 advisory.

    [1:1.8.0.191.b12-0]
    - Update to aarch64-shenandoah-jdk8u191-b12.
    - Resolves: rhbz#1633817

    [1:1.8.0.191.b10-0]
    - Update to aarch64-shenandoah-jdk8u191-b10.
    - Drop 8146115/PR3508/RH1463098 applied upstream.
    - Resolves: rhbz#1633817

    [1:1.8.0.181.b16-0]
    - Add new Shenandoah patch PR3634 as upstream still fails on s390.
    - Resolves: rhbz#1633817

    [1:1.8.0.181.b16-0]
    - Update to aarch64-shenandoah-jdk8u181-b16.
    - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
    - Resolves: rhbz#1633817

    [1:1.8.0.181.b15-0]
    - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
    - Update to aarch64-shenandoah-jdk8u181-b15.
    - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
    - Move buildver to where it should be in the OpenJDK version.
    - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
    - Update pr3539-rh1548475.patch to apply after 8187045.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Remove unneeded functions from ppc shenandoahBarrierSet.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Fix wrong format specifiers in Shenandoah code.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Avoid changing variable types to fix size_t, at least for now.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - More size_t fixes for Shenandoah.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Add additional s390 size_t case for Shenandoah.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Actually add the patch...
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Attempt to fix Shenandoah build issues on s390.
    - Resolves: rhbz#1633817

    [1:1.8.0.181-4.b13]
    - Use the Shenandoah HotSpot on all architectures.
    - Resolves: rhbz#1633817

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2018-2942)

critical Nessus Plugin ID 118183

Version 1.7

Version 1.6

Version 1.7 Nov 2, 2024, 2:28 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411020228
Version 1.6 Oct 23, 2024, 3:11 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410230311