The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0831 advisory.

  - kernel: Integer overflow in the alarm_timer_nsleep function (CVE-2018-13053)

  - kernel: NULL pointer dereference in xfs_da_shrink_inode function (CVE-2018-13094)

  - kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c (CVE-2018-14734)

  - kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks (CVE-2018-17972)

  - kernel: TLB flush happens too late on mremap (CVE-2018-18281)

  - kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service (CVE-2018-18386)

  - kernel: userfaultfd bypasses tmpfs file permissions (CVE-2018-18397)

  - kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer     dereferences exploit on non-SMAP platforms (CVE-2019-9213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : kernel-alt (RHSA-2019:0831)

high Nessus Plugin ID 124257

Version 1.9

Version 1.8

Version 1.9 Feb 7, 2024, 10:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202402072201
Version 1.8 Jan 18, 2024, 8:01 PM CVSSv2 score source (set to "CVE-2018-14734") CVSSv3 score source (set to "CVE-2018-18281") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202401182001