The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1000 advisory.

    [8.24.0-52]     RHEL 7.8 ERRATUM
    - edited patch file ID for imfile to not log useless errors       also improved file-id behavior to adress newly found problems       resolves: rhbz#1763746

    [8.24.0-49]     RHEL 7.8 ERRATUM
    - fixed fsync patch to actually revognize the new option       resolves: rhbz#1696686 (failedQA)

    [8.24.0-48]     RHEL 7.8 ERRATUM
    - added patch resolving crash on wrong MsgProperty       resolves: rhbz#1549706
    - added patch resolving CVE in pmaixforward module       resolves: rhbz#1768320
    - added patch resolving CVE in pmcisconames module       resolves: rhbz#1768323
    - added patch implementing file ID for imfile       resolves: rhbz#1763746
    - added patch fixing omelasticsearch with ES 6.X       resolves: rhbz#1600171

    [8.24.0-47]     RHEL 7.8 ERRATUM
    - edited imfile truncation detection patch with reression fix       resolves: rhbz#1744856

    [8.24.0-46]     RHEL 7.8 ERRATUM
    - Support Intermediate Certificate Chains in rsyslog       resolves: rhbz#1627799
    - fixed WorAroundJournalBug patch to not cause leaks       resolves: rhbz#1744617
    - added patch fixing possible segfault in rate-limiter       resolves: rhbz#1744682

    [8.24.0-45]     RHEL 7.8 ERRATUM
    - fixed fsync patch according to covscan results       resolves: rhbz#1696686

    [8.24.0-44]     RHEL 7.8 ERRATUM
    - added patch and doc-patch for new caseSensitive imUDP/TCP option       resolves: rhbz#1309698

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : rsyslog (ELSA-2020-1000)

critical Nessus Plugin ID 180649

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Oct 23, 2024, 7:37 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Plugin Feed: 202410230737
Version 1.1 Oct 23, 2024, 12:00 AM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410230000
Version 1.0 Sep 7, 2023, 9:48 PM New Plugin Feed: 202309072148