The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1185 advisory.

    nss     [3.19.1-3.0.1]
    - Added nss-vendor.patch to change vendor

    [3.19.1-3]
    - Additional NULL initialization.

    [3.19.1-2]
    - Updated the patch to keep old cipher suite order
    - Resolves: Bug 1224449

    [3.19.1-1]
    - Rebase to nss-3.19.1
    - Resolves: Bug 1224449

    nss-util     [3.19.0-1]
    - Rebase to nss-3.19.1
    - Resolves: Bug 1224449

    [3.18.0-1]
    - Resolves: - Bug 1205064 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 / 7 : nss (ELSA-2015-1185)

low Nessus Plugin ID 84417

Version 2.12