The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0113 advisory.

  - kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c (CVE-2022-36402)

  - kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162)

  - kernel: use after free in unix_stream_sendpage (CVE-2023-4622)

  - kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633)

  - hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : kernel (RHSA-2024:0113)

high Nessus Plugin ID 187898

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404281425
Version 1.1 Jan 15, 2024, 4:36 PM Reference CVE (set "CVE" coverage to "CVE-2022-36402,CVE-2023-2162,CVE-2023-4622,CVE-2023-5633,CVE-2023-20569,CVE-2023-42753") Detection (updated detection logic) Plugin metadata Plugin Feed: 202401151636
Version 1.0 Jan 10, 2024, 5:28 PM New Plugin Feed: 202401101728