The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2543 advisory.

    - block: do not pass disk names as format strings (Kees Cook) [Orabug: 17230083] {CVE-2013-2851}
    - libceph: Fix NULL pointer dereference in auth client code (Tyler Hicks) [Orabug: 17230108]     {CVE-2013-1059}
    - ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Eric Dumazet) [Orabug: 17371078] {CVE-2013-2232}
    - af_key: initialize satype in key_notify_policy_flush() (Nicolas Dichtel) [Orabug: 17370788]     {CVE-2013-2237}
    - Bluetooth: HCI - Fix info leak via getsockname() (Mathias Krause) [Orabug: 17370892] {CVE-2012-6544}
    - Bluetooth: L2CAP - Fix info leak via getsockname() (Mathias Krause) [Orabug: 17371050] {CVE-2012-6544}
    - Bluetooth: HCI - Fix info leak in getsockopt(HCI_FILTER) (Mathias Krause) [Orabug: 17371065]     {CVE-2012-6544}
    - sctp: Use correct sideffect command in duplicate cookie handling (Vlad Yasevich) [Orabug: 17371118]     {CVE-2013-2206}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2543)

medium Nessus Plugin ID 69510

Version 1.21