The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-10341 advisory.

  - Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the     Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system     crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital     Product Data (VPD) data structure. (CVE-2013-1929)

  - The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain     structures, which allows local users to obtain sensitive information from kernel stack memory via a     crafted application that targets the (1) L2CAP or (2) HCI implementation. (CVE-2012-6544)

  - The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain     structures, which allows local users to obtain sensitive information from kernel memory via a crafted     application. (CVE-2012-6545)

  - The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value     of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the     ASLR protection mechanism via a crafted application containing a sigaction system call. (CVE-2013-0914)

  - The vcc_recvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a     certain length variable, which allows local users to obtain sensitive information from kernel stack memory     via a crafted recvmsg or recvfrom system call. (CVE-2013-3222)

  - The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c in the Linux kernel before 3.9-rc7 does not     properly initialize a certain length variable, which allows local users to obtain sensitive information     from kernel stack memory via a crafted recvmsg or recvfrom system call. (CVE-2013-3224)

  - The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a     certain length variable, which allows local users to obtain sensitive information from kernel stack memory     via a crafted recvmsg or recvfrom system call. (CVE-2013-3231)

  - net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a     certain length variable, which allows local users to obtain sensitive information from kernel stack memory     via a crafted recvmsg or recvfrom system call. (CVE-2013-3235)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it is a duplicate of oraclelinux_ELSA-2013-1034-1.nasl (plugin ID 68843).

Detections

Analytics

Oracle Linux 5 : ELSA-2013-1034-1: / kernel (ELSA-2013-10341) (deprecated)

high Nessus Plugin ID 181095

Version 1.2

Version 1.1

Version 1.1

Version 1.0

Version 1.2 Oct 6, 2023, 6:56 PM Detection (deprecated duplicate plugins) Plugin Feed: 202310061856
Version 1.1 Oct 6, 2023, 5:06 PM Detection (deprecated duplicate plugins) Plugin Feed: 202310061706
Version 1.1 Sep 8, 2023, 4:12 PM CVSSv3 severity (based on CVE-2013-1929, severity increased from "Medium" to "High") CVSS metrics ("CVSSv3 score" changed from 6.2 to 8.4. "CVSSv3 vector" changed from "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2013-1929") Plugin Feed: 202309081612
Version 1.0 Sep 7, 2023, 11:01 PM New Plugin Feed: 202309072301