The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2666 advisory.

    OpenShift Enterprise by Red Hat is the company's cloud computing     Platform-as-a-Service (PaaS) solution designed for on-premise or     private cloud deployments.

    The following security issue is addressed with this release:

    An implementation error related to the memory management of request     and responses was found within HAProxy's buffer_slow_realign()     function. An unauthenticated remote attacker could use this flaw     to leak certain memory buffer contents from a past request or     session. (CVE-2015-3281)

    Space precludes documenting all of the bug fixes in this advisory. See     the OpenShift Enterprise Technical Notes, which will be updated     shortly for release 2.2.8, for details about these changes:

    https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-     single/Technical_Notes/index.html

    All OpenShift Enterprise 2 users are advised to upgrade to these updated     packages.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : Red Hat OpenShift Enterprise 2.2.8 (RHSA-2015:2666)

high Nessus Plugin ID 119366

Version 1.7

Version 1.6

Version 1.7 Jun 3, 2024, 4:41 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202406031641
Version 1.6 Apr 25, 2024, 2:46 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2015-3281") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404250246