The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-07831 advisory.

  - The acceleration support for the REP MOVS instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly     bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to     cause a denial of service (host crash) via unspecified vectors. (CVE-2014-8867)

  - The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat     Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions,     which allows local users to access arbitrary physical memory locations, and consequently cause a denial of     service (system crash) or gain privileges, by leveraging permissions on a uverbs device under     /dev/infiniband/. (CVE-2014-8159)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it is a duplicate of oraclelinux_ELSA-2015-0783-1.nasl (plugin ID 82687).

Plugin Deprecated

This plugin has been deprecated and is no longer functional.