The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3267 advisory.

    bind-dyndb-ldap     custodia     ipa     [4.9.13-9.0.1]
    - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

    [9.4.13-9]
    - dcerpc: invalidate forest trust intfo cache when filtering out realm domains       Resolves: RHEL-28559
    - Backport latests test fixes in python3-tests       ipatests: add xfail for autoprivate group test with override       ipatests: remove xfail thanks to sssd 2.9.4       ipatests: adapt for new automembership fixup behavior       ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases       test_xmlrpc: adopt to automember plugin message changes in 389-ds       Resolves: RHEL-29908

    ipa-healthcheck     opendnssec     python-jwcrypto     [0.5.0-2]
    - Address potential DoS with high compression ratio       Resolves: RHEL-28697
    - Limit number of iterations for PBES       Resolves: RHEL-23036 RHEL-23037

    python-kdcproxy     python-qrcode     python-yubico     pyusb     slapi-nis     softhsm

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 8 : idm:DL1 / and / idm:client (ELSA-2024-3267)

medium Nessus Plugin ID 198278

Version 1.2