The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2987 advisory.

    - Fix CVE-2021-20095     Resolves: rhbz#1955615
    - Fix CVE-2019-6446
    - Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359
    - Security fix for CVE-2022-48560     Resolves: RHEL-16702
    - Fix for CVE-2022-48565     Resolves: RHEL-7088

    python2-rpm-macros     python2-setuptools
    - Fix for CVE-2022-40897     Resolves: RHEL-9763

    python2-six     python-attrs     python-backports     python-backports-ssl_match_hostname     python-chardet
    - Security fix for CVE-2024-22195     Resolves: RHEL-21348
    - Fix CVE-2020-28493: ReDOS vulnerability due to the sub-pattern     Resolves: rhbz#1928707
    - Security fix for CVE-2021-43818     Resolves: rhbz#2032569
    - Security fix for CVE-2021-28957     Resolves: rhbz#1941534
    - Security fix for CVE-2020-27783: mXSS due to the use of improper parser     Resolves: rhbz#1901633
    - Security fix for CVE-2023-32681     Resolves: rhbz#2209469
    - Update to v2.20.0 for CVE-2018-18074.
    - Remove patch for CVE-2015-2296, now included in the upstream release.
    - Backport fix for CVE-2015-2296.
    - Security fix for CVE-2023-43804     Resolves: RHEL-11993
    - Security fix for CVE-2020-26137     Resolves: rhbz#1883890
    - Rebased to 1.24.2 to fix CVE-2019-11324
    - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
    - Add patch for CVE-2014-9130 (bug 1204829)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : python27:2.7 (ELSA-2024-2987)

high Nessus Plugin ID 198035

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Nov 15, 2024, 3:52 PM IAVM reference Plugin Feed: 202411151552
Version 1.5 Nov 2, 2024, 7:54 AM CVSS metrics ("Cvssv4 score" set to 9.3) Detection (updated detection logic) Plugin Feed: 202411020754
Version 1.4 Sep 23, 2024, 7:12 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202409230712
Version 1.3 Sep 22, 2024, 3:24 AM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202409220324
Version 1.2 Jul 10, 2024, 12:05 AM Plugin metadata Plugin Feed: 202407100005
Version 1.1 May 28, 2024, 11:48 PM New Plugin Feed: 202405282348