The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4729 advisory.

    - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 29755247]     {CVE-2018-20169}
    - ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan)  [Orabug:
    29925523]  {CVE-2019-11833} {CVE-2019-11833}
    - ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang)  [Orabug: 29926005]  {CVE-2019-12381}
    - ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang)  [Orabug: 29926057]     {CVE-2019-12378}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4854 advisory.

    - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 30045797]     {CVE-2018-20169}
    - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 30393902]     {CVE-2017-14991}
    - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 30412151]     {CVE-2017-15102}
    - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447844]  {CVE-2019-14284}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
164596	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.3)	Nessus	Misc.	9/1/2022	10/30/2024	critical
127613	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4729)	Nessus	Oracle Linux Local Security Checks	8/12/2019	10/22/2024	medium
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	9/1/2022	11/20/2024	critical
131175	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4854)	Nessus	Oracle Linux Local Security Checks	11/21/2019	10/22/2024	medium

Detections

Analytics

Plugins Search

critical

medium

critical

medium