The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2931 advisory.

  - kernel: net: Out of bounds stack read in memcpy_fromiovec (CVE-2016-8399)

  - kernel: Out-of-bounds heap access in xfrm (CVE-2017-7184)

  - kernel: Possible heap buffer overflow in brcmf_cfg80211_mgmt_tx() (CVE-2017-7541)

  - kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop (CVE-2017-7542)

  - kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack     (CVE-2017-7558)

  - kernel: Use-after-free in sys_mq_notify() (CVE-2017-11176)

  - kernel: Divide-by-zero in __tcp_select_window (CVE-2017-14106)

  - kernel: Heap out-of-bounds read in AF_PACKET sockets (CVE-2017-1000111)

  - kernel: Exploitable memory corruption due to UFO to non-UFO path switch (CVE-2017-1000112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : kernel-rt (RHSA-2017:2931)

high Nessus Plugin ID 104004

Version 3.14