The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0630 advisory.

    [1.1.0-24]
    - Proper global init/deinit of GnuTLS       Resolves: bz#1418946

    [1.1.0-23]
    - Fix buffer overflow in FullFramePixelBuffer::fillRect       Resolves: bz#1416289

    [1.1.0-22]
    - Fix buffer overflow in FullFramePixelBuffer::fillRect       Resolves: bz#1416289

    [1.1.0-21]
    - Enable DRI2 and DRI3       Resolves: bz#1323065

    [1.1.0-20]
    - Rebuild against fixed xorg-x11-server to avoid automatical disconnects       when initiazed from xinetd       Resolves: bz#1390458

    [1.1.0-19]
    - Restore default behaviour to listen on TCP       Resolves: bz#1378922

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : tigervnc (ELSA-2017-0630)

critical Nessus Plugin ID 99065

Version 3.7