Oracle Linux 7 : kernel (ELSA-2015-0290)

High Nessus Plugin ID 81800

Synopsis

The remote Oracle Linux host is missing one or more security updates.

Description

The remote Oracle Linux host is missing a security update for one or more kernel-related packages.

Solution

Update the affected kernel packages.

See Also

https://oss.oracle.com/pipermail/el-errata/2015-March/004880.html

Plugin Details

Severity: High

ID: 81800

File Name: oraclelinux_ELSA-2015-0290.nasl

Version: 1.3

Type: local

Agent: unix

Published: 2015/03/13

Updated: 2018/09/17

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: p-cpe:/a:oracle:linux:kernel, p-cpe:/a:oracle:linux:kernel-abi-whitelists, p-cpe:/a:oracle:linux:kernel-debug, p-cpe:/a:oracle:linux:kernel-debug-devel, p-cpe:/a:oracle:linux:kernel-devel, p-cpe:/a:oracle:linux:kernel-doc, p-cpe:/a:oracle:linux:kernel-headers, p-cpe:/a:oracle:linux:kernel-tools, p-cpe:/a:oracle:linux:kernel-tools-libs, p-cpe:/a:oracle:linux:kernel-tools-libs-devel, p-cpe:/a:oracle:linux:perf, p-cpe:/a:oracle:linux:python-perf, cpe:/o:oracle:linux:7

Required KB Items: Host/local_checks_enabled, Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

CANVAS (CANVAS)

Core Impact

Metasploit (Android "Towelroot" Futex Requeue Kernel Exploit)

Reference Information

CVE: CVE-2013-2929, CVE-2014-0181, CVE-2014-0196, CVE-2014-0206, CVE-2014-1737, CVE-2014-1738, CVE-2014-1739, CVE-2014-2568, CVE-2014-2672, CVE-2014-2673, CVE-2014-2706, CVE-2014-2851, CVE-2014-3144, CVE-2014-3145, CVE-2014-3153, CVE-2014-3181, CVE-2014-3182, CVE-2014-3184, CVE-2014-3185, CVE-2014-3186, CVE-2014-3534, CVE-2014-3611, CVE-2014-3631, CVE-2014-3646, CVE-2014-3673, CVE-2014-3687, CVE-2014-3688, CVE-2014-3690, CVE-2014-3917, CVE-2014-3940, CVE-2014-4027, CVE-2014-4171, CVE-2014-4652, CVE-2014-4653, CVE-2014-4654, CVE-2014-4655, CVE-2014-4656, CVE-2014-4667, CVE-2014-4699, CVE-2014-4943, CVE-2014-5045, CVE-2014-5077, CVE-2014-5471, CVE-2014-5472, CVE-2014-6410, CVE-2014-6416, CVE-2014-7145, CVE-2014-7825, CVE-2014-7826, CVE-2014-7841, CVE-2014-8086, CVE-2014-8884, CVE-2014-9322