The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12566 advisory.

    - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)  [Orabug: 35493606]     {CVE-2023-3159}
    - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)  [Orabug: 35448003]  {CVE-2022-1679}
    - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)  [Orabug:
    35354880]  {CVE-2023-2269}
    - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou)  [Orabug: 35181652]     {CVE-2023-1118}
    - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os     (Zheng Wang)  [Orabug: 35180779]  {CVE-2022-3424}
    - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)  [Orabug: 35457204]     {CVE-2023-34256}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12566)

high Nessus Plugin ID 177935

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Oct 23, 2024, 10:51 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202410232251
Version 1.2 Oct 22, 2024, 6:42 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410221842
Version 1.1 Sep 18, 2023, 10:10 PM Detection Plugin Feed: 202309182210
Version 1.0 Jul 4, 2023, 8:05 PM New Plugin Feed: 202307042005