The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1504 advisory.

    [1:1.7.0.111-2.6.7.1.0.1]
    - Add oracle-enterprise.patch
    - Fix DISTRO_NAME to 'Oracle Linux'

    [1:1.7.0.111-2.6.7.1]
    - Bump to jdk7u111 b01 to fix TCK regressions (7081817 & 8162344)
    - Resolves: rhbz#1350038

    [1:1.7.0.111-2.6.7.0]
    - Bump to 2.6.7 and u111b00.
    - Update SystemTap bundle with fix for PR3091/RH1204159
    - Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
    - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
    - Resolves: rhbz#1350038

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 5 / 6 / 7 : java-1.7.0-openjdk (ELSA-2016-1504)

critical Nessus Plugin ID 92599

Version 2.9