The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-03231 advisory.

  - The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles     DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root     privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO     setsockopt system call. (CVE-2017-6074)

  - It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before     2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections,     which could result in memory corruptions. A remote attacker could use this flaw to crash the system.
    (CVE-2017-2634)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it is a duplicate of oraclelinux_ELSA-2017-0323-1.nasl (plugin ID 97404).

Plugin Deprecated

This plugin has been deprecated and is no longer functional.