The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0350 advisory.

  - kernel: xfs: potential buffer overflow in xfs_readlink() (CVE-2011-4077)

  - kernel: crypto: ghash: null pointer deref if no key is set (CVE-2011-4081)

  - kernel: jbd/jbd2: invalid value of first log block leads to oops (CVE-2011-4132)

  - kernel: kvm: device assignment DoS (CVE-2011-4347)

  - kernel: send(m)msg: user pointer dereferences (CVE-2011-4594)

  - kernel: perf, powerpc: Handle events that raise an exception without overflowing (CVE-2011-4611)

  - kernel: kvm: pit timer with no irqchip crashes the system (CVE-2011-4622)

  - kernel: xfs heap overflow (CVE-2012-0038)

  - kernel: kvm: syscall instruction induced guest panic (CVE-2012-0045)

  - kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries (CVE-2012-0207)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : kernel (RHSA-2012:0350)

high Nessus Plugin ID 58261

Version 1.30