The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1465 advisory.

  - kernel: tpm: infoleak (CVE-2011-1162)

  - kernel: corrupted GUID partition tables can cause kernel oops (CVE-2011-1577)

  - kernel: taskstats io infoleak (CVE-2011-2494)

  - kernel: ipv6: make fragment identifications less predictable (CVE-2011-2699)

  - kernel: perf tools: may parse user-controlled configuration file (CVE-2011-2905)

  - kernel: net: improve sequence number generation (CVE-2011-3188)

  - kernel: cifs: signedness issue in CIFSFindNext() (CVE-2011-3191)

  - kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message (CVE-2011-3353)

  - kernel: b43: allocate receive buffers big enough for max frame len + offset (CVE-2011-3359)

  - kernel: cifs: always do is_path_accessible check in cifs_mount (CVE-2011-3363)

  - kernel: vlan: fix panic when handling priority tagged frames (CVE-2011-3593)

  - kernel: wrong headroom check in udp6_ufo_fragment() (CVE-2011-4326)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : kernel (RHSA-2011:1465)

critical Nessus Plugin ID 56927

Version 1.25