The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-13027 advisory.

    - Create new 20230821 release for OL7 which includes the following fixed CVEs:
      CVE-2019-14560
    - Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
      CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286     CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778     CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840     CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552     CVE-2019-1543 CVE-2018-0734 CVE-2018-0735

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : edk2 (ELSA-2023-13027)

critical Nessus Plugin ID 186669

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Oct 23, 2024, 7:37 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") Plugin Feed: 202410230737
Version 1.1 Oct 22, 2024, 6:42 PM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 supplemental" set to "CVSS:4.0/U:Red") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202410221842
Version 1.0 Dec 7, 2023, 7:30 PM New Plugin Feed: 202312071930