The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2000 advisory.

    - Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]       Resolves: bz#1439127       Prevent double free by crafted fences [CVE-2017-7393]       Resolves: bz#1439134
    - Be more restrictive with shared memory mode bits       Resolves: bz#1152552       Limit max username/password size in SSecurityPlain [CVE-2017-7394]       Resolves: bz#1438737       Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]       Resolves: bz#1438742

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : tigervnc / and / fltk (ELSA-2017-2000)

critical Nessus Plugin ID 102293

Version 3.9