The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0842 advisory.

  - kernel: drm ioctls infoleak (CVE-2010-2803)

  - kernel: wireless: fix 64K kernel heap content leak via ioctl (CVE-2010-2955)

  - kernel: arbitrary kernel memory write via i915 GEM ioctl (CVE-2010-2962)

  - kernel: ftrace NULL ptr deref (CVE-2010-3079)

  - kernel: 64-bit Compatibility Mode Stack Pointer Underflow (CVE-2010-3081)

  - kernel: niu: buffer overflow for ETHTOOL_GRXCLSRLALL (CVE-2010-3084)

  - kernel: IA32 System Call Entry Point Vulnerability (CVE-2010-3301)

  - kernel: sctp: do not reset the packet during sctp_packet_config (CVE-2010-3432)

  - kernel: pktcdvd ioctl dev_minor missing range check (CVE-2010-3437)

  - kernel: prevent heap corruption in snd_ctl_new() (CVE-2010-3442)

  - kvm: invalid selector in fs/gs causes kernel panic (CVE-2010-3698)

  - kernel: sctp memory corruption in HMAC handling (CVE-2010-3705)

  - kernel: RDS sockets local privilege escalation (CVE-2010-3904)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : kernel (RHSA-2010:0842)

high Nessus Plugin ID 50629

Version 1.42