The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0057 for details.

The 3.11.7 stable update contains a number of important fixes across the tree. Various bug and CVE fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2013-2929)

Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows normal users to enable function tracing.
An unprivileged local user could exploit this flaw to obtain potentially sensitive information from the kernel. (CVE-2013-2930)

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. (CVE-2013-4345)

Jason Wang discovered a bug in the network flow dissector in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service (infinite loop). (CVE-2013-4348)

Multiple integer overflow flaws were discovered in the Alchemy LCD frame- buffer drivers in the Linux kernel. An unprivileged local user could exploit this flaw to gain administrative privileges.
(CVE-2013-4511)

Nico Golde and Fabian Yamaguchi reported a buffer overflow in the Ozmo Devices USB over WiFi devices. A local user could exploit this flaw to cause a denial of service or possibly unspecified impact.
(CVE-2013-4513)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for Agere Systems HERMES II Wireless PC Cards. A local user with the CAP_NET_ADMIN capability could exploit this flaw to cause a denial of service or possibly gain administrative priviliges.
(CVE-2013-4514)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for Beceem WIMAX chipset based devices. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2013-4515)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for the SystemBase Multi-2/PCI serial card. An unprivileged user could obtain sensitive information from kernel memory.
(CVE-2013-4516)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's debugfs filesystem. An administrative local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2013-6378)

Nico Golde and Fabian Yamaguchi reported a flaw in the driver for Adaptec AACRAID scsi raid devices in the Linux kernel. A local user could use this flaw to cause a denial of service or possibly other unspecified impact. (CVE-2013-6380)

A flaw was discovered in the Linux kernel's compat ioctls for Adaptec AACRAID scsi raid devices. An unprivileged local user could send administrative commands to these devices potentially compromising the data stored on the device. (CVE-2013-6383)

Nico Golde reported a flaw in the Linux kernel's userspace IO (uio) driver. A local user could exploit this flaw to cause a denial of service (memory corruption) or possibly gain privileges.
(CVE-2013-6763)

A race condition flaw was discovered in the Linux kernel's ipc shared memory implementation. A local user could exploit this flaw to cause a denial of service (system crash) or possibly have unspecied other impacts. (CVE-2013-7026).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001984 advisory.

    The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote     attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with     IPIP encapsulation.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Various bug and CVE fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1490 advisory.

    The kernel-rt packages contain the Linux kernel, the core of any Linux     operating system.

    * A flaw was found in the way IP packets with an Internet Header Length     (ihl) of zero were processed in the skb_flow_dissect() function in the     Linux kernel. A remote attacker could use this flaw to trigger an infinite     loop in the kernel, leading to a denial of service. (CVE-2013-4348,     Important)

    * A flaw was found in the way the Linux kernel's IPv6 implementation     handled certain UDP packets when the UDP Fragmentation Offload (UFO)     feature was enabled. A remote attacker could use this flaw to crash the     system or, potentially, escalate their privileges on the system.
    (CVE-2013-4387, Important)

    * A flaw was found in the way the Linux kernel handled the creation of     temporary IPv6 addresses. If the IPv6 privacy extension was enabled     (/proc/sys/net/ipv6/conf/eth0/use_tempaddr set to '2'), an attacker on     the local network could disable IPv6 temporary address generation, leading     to a potential information disclosure. (CVE-2013-0343, Moderate)

    * A flaw was found in the way the Linux kernel handled HID (Human Interface     Device) reports with an out-of-bounds Report ID. An attacker with physical     access to the system could use this flaw to crash the system or,     potentially, escalate their privileges on the system. (CVE-2013-2888,     Moderate)

    * Heap-based buffer overflow flaws were found in the way the     Pantherlord/GreenAsia game controller driver, the Logitech force feedback     drivers, and the Logitech Unifying receivers driver handled HID reports.
    An attacker with physical access to the system could use these flaws to     crash the system or, potentially, escalate their privileges on the system.
    (CVE-2013-2892, CVE-2013-2893, CVE-2013-2895, Moderate)

    * A NULL pointer dereference flaw was found in the way the N-Trig touch     screen driver handled HID reports. An attacker with physical access to the     system could use this flaw to crash the system, resulting in a denial of     service. (CVE-2013-2896, Moderate)

    * An information leak flaw was found in the way the Linux kernel's device     mapper subsystem, under certain conditions, interpreted data written to     snapshot block devices. An attacker could use this flaw to read data from     disk blocks in free space, which are normally inaccessible. (CVE-2013-4299,     Moderate)

    * A use-after-free flaw was found in the tun_set_iff() function in the     Universal TUN/TAP device driver implementation in the Linux kernel.
    A privileged user could use this flaw to crash the system or, potentially,     further escalate their privileges on the system. (CVE-2013-4343, Moderate)

    * An off-by-one flaw was found in the way the ANSI CPRNG implementation in     the Linux kernel processed non-block size aligned requests. This could lead     to random numbers being generated with less bits of entropy than expected     when ANSI CPRNG was used. (CVE-2013-4345, Moderate)

    * A flaw was found in the way the Linux kernel's IPv6 SCTP implementation     interacted with the IPsec subsystem. This resulted in unencrypted SCTP     packets being sent over the network even though IPsec encryption was     enabled. An attacker able to inspect these SCTP packets could use this flaw     to obtain potentially sensitive information. (CVE-2013-4350, Moderate)

    Red Hat would like to thank Fujitsu for reporting CVE-2013-4299 and Stephan     Mueller for reporting CVE-2013-4345. The CVE-2013-4348 issue was discovered     by Jason Wang of Red Hat.

    Bug fix:

    * RoCE appeared to be supported in the MRG Realtime kernel even when the     required user space packages from the HPN channel were not installed.
    The Realtime kernel now checks for the HPN channel packages before exposing     the RoCE interfaces. RoCE devices appear as plain 10GigE devices if the     needed HPN channel user space packages are not installed. (BZ#1012993)

    Users should upgrade to these updated packages, which upgrade the kernel-rt     kernel to version kernel-rt-3.8.13-rt14, and correct these issues.
    The system must be rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
99163	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)	Nessus	OracleVM Local Security Checks	4/3/2017	12/26/2025	critical
70833	Fedora 20 : kernel-3.11.7-300.fc20 (2013-20705)	Nessus	Fedora Local Security Checks	11/11/2013	1/11/2021	high
71269	Amazon Linux AMI : kernel (ALAS-2013-252)	Nessus	Amazon Linux Local Security Checks	12/10/2013	4/18/2018	high
71796	Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2070-1)	Nessus	Ubuntu Local Security Checks	1/5/2014	4/7/2023	high
286473	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001984)	Nessus	Unity Linux Local Security Checks	1/15/2026	1/15/2026	high
70751	Fedora 19 : kernel-3.11.6-201.fc19 (2013-20547)	Nessus	Fedora Local Security Checks	11/5/2013	1/11/2021	high
76669	RHEL 6 : kernel-rt (RHSA-2013:1490)	Nessus	Red Hat Local Security Checks	7/22/2014	6/3/2024	high
127146	NewStart CGSL MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0004)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	5/19/2022	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high

high

high