The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3521 advisory.

    [1:11.0.1.13-3.0.1]
    - link atomic for ix86 build

    [1:11.0.1.13-3]
    - Bump release for rebuild.

    [1:11.0.1.13-2]
    - Use LTS designator in version output for RHEL.

    [1:11.0.1.13-1]
    - Update to October 2018 CPU release, 11.0.1+13.

    [1:11.0.0.28-2]
    - Use --with-vendor-version-string=18.9 so as to show original       GA date for the JDK.

    [1:11.0.0.28-1]
    - Identify as GA version and no longer as early access (EA).
    - JDK 11 has been released for GA on 2018-09-25.

    [1:11.0.ea.28-9]
    - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes       RHBZ-1624122.
    - Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to       optimize compilation of fdlibm library.
    - Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so       as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
    - Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to       optimize compilation of libsaproc (extra c flags won't override       optimization).
    - Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to       optimize compilation of libjsig.
    - Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to       optimize compilation of vmStructs.cpp (part of libjvm.so).
    - Reinstate filtering of opt flags coming from redhat-rpm-config.

    [1:11.0.ea.28-8]
    - removed version less provides
    - javadocdir moved to arched dir as it is no longer noarch
    - Resolves: rhbz#1570856

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : java-11-openjdk (ELSA-2018-3521)

critical Nessus Plugin ID 118849

Version 1.5

Version 1.4

Version 1.5 Oct 23, 2024, 3:11 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410230311
Version 1.4 Jul 24, 2024, 6:31 PM CVSSv2 score source (set to "CVE-2018-3183") Plugin Feed: 202407241831