The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0654 advisory.

  - hw: cpu: speculative execution bounds-check bypass (CVE-2017-5753)

  - kernel: Buffer overflow in mp_override_legacy_irq() (CVE-2017-11473)

  - kernel: memory leak when merging buffers in SCSI IO vectors (CVE-2017-12190)

  - kernel: NULL pointer dereference due to KEYCTL_READ on negative key (CVE-2017-12192)

  - kernel: net: double-free and memory corruption in get_net_ns_by_id() (CVE-2017-15129)

  - kernel: Incorrect updates of uninstantiated keys crash the kernel (CVE-2017-15299)

  - Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform (CVE-2017-15306)

  - Kernel: ipsec: xfrm: use-after-free leading to potential privilege escalation (CVE-2017-16939)

  - kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to     systemwide nfnl_cthelper_list structure (CVE-2017-17448)

  - kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe     systemwide activity (CVE-2017-17449)

  - kernel: Arbitrary stack overwrite causing oops via crafted signal frame (CVE-2017-1000255)

  - kernel: Stack information leak in the EFS element (CVE-2017-1000410)

  - kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact     (CVE-2018-6927)

  - kernel: Race condition in sound system can lead to denial of service (CVE-2018-1000004)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : kernel-alt (RHSA-2018:0654)

high Nessus Plugin ID 108942

Version 1.15

Version 1.14

Version 1.13

Version 1.15 Apr 28, 2024, 3:17 AM CVE (set "CVE" coverage to "CVE-2017-1000255,CVE-2017-1000410,CVE-2017-11473,CVE-2017-12190,CVE-2017-12192,CVE-2017-15129,CVE-2017-15299,CVE-2017-15306,CVE-2017-16939,CVE-2017-17448,CVE-2017-17449,CVE-2017-5753,CVE-2018-1000004,CVE-2018-6927") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202404280317
Version 1.14 Feb 7, 2024, 10:01 PM Detection (updated detection logic) Plugin Feed: 202402072201
Version 1.13 Jan 18, 2024, 8:01 PM CVSSv2 score source (set to "CVE-2017-16939") CVSSv3 score source (set to "CVE-2018-6927") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202401182001