The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:2402 advisory.

    The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization     Manager. The appliance is available to download as an OVA file from the Customer Portal.

    Security Fix(es):

    * Modern operating systems implement virtualization of physical memory to efficiently use available system     resources and provide inter-domain protection through access control and isolation. The L1TF issue was     found in the way the x86 microprocessor designs have implemented speculative execution of instructions (a     commonly used performance optimisation) in combination with handling of page-faults caused by terminated     virtual to physical address resolving process. As a result, an unprivileged attacker could use this flaw     to read privileged memory of the kernel or other processes and/or cross guest/host boundaries to read host     memory by conducting targeted cache side-channel attacks. (CVE-2018-3620, CVE-2018-3646)

    * A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A     remote attacker could use this flaw to trigger time and calculation expensive calls to     tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() functions by sending specially modified packets within     ongoing TCP sessions which could lead to a CPU saturation and hence a denial of service on the system.
    Maintaining the denial of service condition requires continuous two-way TCP sessions to a reachable open     port, thus the attacks cannot be performed using spoofed IP addresses. (CVE-2018-5390)

    Red Hat would like to thank Intel OSSIRT (Intel.com) for reporting CVE-2018-3620 and CVE-2018-3646 and     Juha-Matti Tilli (Aalto University, Department of Communications and Networking and Nokia Bell Labs) for     reporting CVE-2018-5390.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

L1 Terminal Fault speculative side channel patch bundle [XSA-273, CVE-2018-3620, CVE-2018-3646] drop patches also in the bundle, which also includes Use of v2 grant tables may cause crash on ARM [XSA-268] (#1616081) x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS [XSA-269] (#1616077) oxenstored does not apply quota-maxentity [XSA-272] (#1616080)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2602 advisory.

  - Kernel: hw: cpu: L1 terminal fault (L1TF) (CVE-2018-3620, CVE-2018-3646)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 4.17.14-202 build contains patches for the 'foreshadow ' security issue that were missing from the 201 builds.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities including L1 Terminal Fault (L1TF) and a local code execution vulnerability.

The remote Windows host is missing security update 4343885.
It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2018-8341, CVE-2018-8348)

  - A remote code execution vulnerability exists when the     Windows font library improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited the vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-8344)

  - An elevation of privilege vulnerability exists in the     Network Driver Interface Specification (NDIS) when     ndis.sys fails to check the length of a buffer prior to     copying memory to it.  (CVE-2018-8343)

  - A remote code execution vulnerability exists in     &quot;Microsoft COM for Windows&quot; when it fails to     properly handle serialized objects. An attacker who     successfully exploited the vulnerability could use a     specially crafted file or script to perform actions. In     an email attack scenario, an attacker could exploit the     vulnerability by sending the specially crafted file to     the user and convincing the user to open the file.
    (CVE-2018-8349)

  - A remote code execution vulnerability exists in the way     that the ChakraCore scripting engine handles objects in     memory. The vulnerability could corrupt memory in such a     way that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8390)

  - A remote code execution vulnerability exists when the     Windows Shell does not properly validate file paths. An     attacker who successfully exploited this vulnerability     could run arbitrary code in the context of the current     user. If the current user is logged on as an     administrator, an attacker could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with elevated privileges. Users whose accounts     are configured to have fewer privileges on the system     could be less impacted than users who operate with     administrative privileges.  (CVE-2018-8414)

  - A security feature bypass vulnerability exists in Device     Guard that could allow an attacker to inject malicious     code into a Windows PowerShell session. An attacker who     successfully exploited this vulnerability could inject     code into a trusted PowerShell process to bypass the     Device Guard Code Integrity policy on the local machine.
    (CVE-2018-8200, CVE-2018-8204)

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8355, CVE-2018-8372, CVE-2018-8385)

  - An elevation of privilege vulnerability exists in     Microsoft Windows when the Windows kernel fails to     properly handle parsing of certain symbolic links. An     attacker who successfully exploited this vulnerability     could potentially access privileged registry keys and     thereby elevate permissions. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2018-8347)

  - A remote code execution vulnerability exists when     Microsoft Windows PDF Library improperly handles objects     in memory. The vulnerability could corrupt memory in a     way that enables an attacker to execute arbitrary code     in the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user. If the current     user is logged on with administrative user rights, an     attacker could take control of an affected system. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2018-8350)

  - A remote code execution vulnerability exists in     Microsoft Windows that could allow remote code execution     if a .LNK file is processed. An attacker who     successfully exploited this vulnerability could gain the     same user rights as the local user.  (CVE-2018-8345)

  - A information disclosure vulnerability exists when     WebAudio Library improperly handles audio requests. An     attacker who has successfully exploited this     vulnerability might be able to read privileged data     across trust boundaries. In browsing scenarios, an     attacker could convince a user to visit a malicious site     and leverage the vulnerability to obtain privileged     information from the browser process, such as sensitive     data from other opened tabs. An attacker could also     inject malicious code into advertising networks used by     trusted sites or embed malicious code on a compromised,     but trusted, site. The update addresses the     vulnerability by correcting how the WebAudio Library     handles audio requests. (CVE-2018-8370)

  - An elevation of privilege vulnerability exists in the     Windows Installer when the Windows Installer fails to     properly sanitize input leading to an insecure library     loading behavior. A locally authenticated attacker could     run arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights. The security update addresses the vulnerability     by correcting the input sanitization error to preclude     unintended elevation. (CVE-2018-8339)

  - A remote code execution vulnerability exists in the way     that the Chakra scripting engine handles objects in     memory in Microsoft Edge. The vulnerability could     corrupt memory in such a way that an attacker could     execute arbitrary code in the context of the current     user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the     current user.  (CVE-2018-8266, CVE-2018-8381)

  - A remote code execution vulnerability exists when     Internet Explorer improperly validates hyperlinks before     loading executable libraries. An attacker who     successfully exploited this vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2018-8316)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2018-8399, CVE-2018-8404)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2018-8394, CVE-2018-8398)

  - A remote code execution vulnerability exists in the way     that Microsoft browsers access objects in memory. The     vulnerability could corrupt memory in a way that could     allow an attacker to execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8403)

  - An information disclosure vulnerability exists when     affected Microsoft browsers improperly allow cross-frame     interaction. An attacker who successfully exploited this     vulnerability could allow an attacker to obtain browser     frame or window state from a different domain. For an     attack to be successful, an attacker must persuade a     user to open a malicious website from a secure website.
    This update addresses the vulnerability by denying     permission to read the state of the object model, to     which frames or windows on different domains should not     have access. (CVE-2018-8351)

  - An elevation of privilege vulnerability exists in     Microsoft browsers allowing sandbox escape. An attacker     who successfully exploited the vulnerability could use     the sandbox escape to elevate privileges on an affected     system. This vulnerability by itself does not allow     arbitrary code execution; however, it could allow     arbitrary code to be run if the attacker uses it in     combination with another vulnerability (such as a remote     code execution vulnerability or another elevation of     privilege vulnerability) that is capable of leveraging     the elevated privileges when code execution is     attempted. (CVE-2018-8357)

  - An Elevation of Privilege vulnerability exists when     Diagnostics Hub Standard Collector allows file creation     in arbitrary locations.  (CVE-2018-0952)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8353, CVE-2018-8371, CVE-2018-8373,     CVE-2018-8389)

  - An elevation of privilege vulnerability exists when the     DirectX Graphics Kernel (DXGKRNL) driver improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could run processes in an     elevated context.  (CVE-2018-8401, CVE-2018-8405,     CVE-2018-8406)

  - An information disclosure vulnerability exists in     Microsoft .NET Framework that could allow an attacker to     access information in multi-tenant environments. The     vulnerability is caused when .NET Framework is used in     high-load/high-density network connections where content     from one stream can blend into another stream.
    (CVE-2018-8360)

  - A spoofing vulnerability exists when Microsoft Edge     improperly handles specific HTML content. An attacker     who successfully exploited this vulnerability could     trick a user into believing that the user was on a     legitimate website. The specially crafted website could     either spoof content or serve as a pivot to chain an     attack with other vulnerabilities in web services.
    (CVE-2018-8388)

The remote Windows host is missing security update 4343897.
It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2018-8341, CVE-2018-8348)

  - A remote code execution vulnerability exists when the     Windows font library improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited the vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-8344)

  - An elevation of privilege vulnerability exists in the     Network Driver Interface Specification (NDIS) when     ndis.sys fails to check the length of a buffer prior to     copying memory to it.  (CVE-2018-8343)

  - A remote code execution vulnerability exists in     &quot;Microsoft COM for Windows&quot; when it fails to     properly handle serialized objects. An attacker who     successfully exploited the vulnerability could use a     specially crafted file or script to perform actions. In     an email attack scenario, an attacker could exploit the     vulnerability by sending the specially crafted file to     the user and convincing the user to open the file.
    (CVE-2018-8349)

  - An elevation of privilege vulnerability exists when the     DirectX Graphics Kernel (DXGKRNL) driver improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could run processes in an     elevated context.  (CVE-2018-8400, CVE-2018-8401,     CVE-2018-8405, CVE-2018-8406)

  - A remote code execution vulnerability exists in the way     that the ChakraCore scripting engine handles objects in     memory. The vulnerability could corrupt memory in such a     way that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8390)

  - A remote code execution vulnerability exists when the     Windows Shell does not properly validate file paths. An     attacker who successfully exploited this vulnerability     could run arbitrary code in the context of the current     user. If the current user is logged on as an     administrator, an attacker could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with elevated privileges. Users whose accounts     are configured to have fewer privileges on the system     could be less impacted than users who operate with     administrative privileges.  (CVE-2018-8414)

  - A security feature bypass vulnerability exists in Device     Guard that could allow an attacker to inject malicious     code into a Windows PowerShell session. An attacker who     successfully exploited this vulnerability could inject     code into a trusted PowerShell process to bypass the     Device Guard Code Integrity policy on the local machine.
    (CVE-2018-8200, CVE-2018-8204)

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8355, CVE-2018-8372, CVE-2018-8385)

  - An elevation of privilege vulnerability exists in     Microsoft Windows when the Windows kernel fails to     properly handle parsing of certain symbolic links. An     attacker who successfully exploited this vulnerability     could potentially access privileged registry keys and     thereby elevate permissions. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2018-8347)

  - A remote code execution vulnerability exists when     Microsoft Windows PDF Library improperly handles objects     in memory. The vulnerability could corrupt memory in a     way that enables an attacker to execute arbitrary code     in the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user. If the current     user is logged on with administrative user rights, an     attacker could take control of an affected system. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2018-8350)

  - A remote code execution vulnerability exists in     Microsoft Windows that could allow remote code execution     if a .LNK file is processed. An attacker who     successfully exploited this vulnerability could gain the     same user rights as the local user.  (CVE-2018-8345)

  - A information disclosure vulnerability exists when     WebAudio Library improperly handles audio requests. An     attacker who has successfully exploited this     vulnerability might be able to read privileged data     across trust boundaries. In browsing scenarios, an     attacker could convince a user to visit a malicious site     and leverage the vulnerability to obtain privileged     information from the browser process, such as sensitive     data from other opened tabs. An attacker could also     inject malicious code into advertising networks used by     trusted sites or embed malicious code on a compromised,     but trusted, site. The update addresses the     vulnerability by correcting how the WebAudio Library     handles audio requests. (CVE-2018-8370)

  - An elevation of privilege vulnerability exists in the     Windows Installer when the Windows Installer fails to     properly sanitize input leading to an insecure library     loading behavior. A locally authenticated attacker could     run arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights. The security update addresses the vulnerability     by correcting the input sanitization error to preclude     unintended elevation. (CVE-2018-8339)

  - A remote code execution vulnerability exists in the way     that the Chakra scripting engine handles objects in     memory in Microsoft Edge. The vulnerability could     corrupt memory in such a way that an attacker could     execute arbitrary code in the context of the current     user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the     current user.  (CVE-2018-8266, CVE-2018-8381)

  - A remote code execution vulnerability exists when     Internet Explorer improperly validates hyperlinks before     loading executable libraries. An attacker who     successfully exploited this vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2018-8316)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2018-8399, CVE-2018-8404)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2018-8394, CVE-2018-8398)

  - A remote code execution vulnerability exists in the way     that Microsoft browsers access objects in memory. The     vulnerability could corrupt memory in a way that could     allow an attacker to execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8403)

  - An information disclosure vulnerability exists when     affected Microsoft browsers improperly allow cross-frame     interaction. An attacker who successfully exploited this     vulnerability could allow an attacker to obtain browser     frame or window state from a different domain. For an     attack to be successful, an attacker must persuade a     user to open a malicious website from a secure website.
    This update addresses the vulnerability by denying     permission to read the state of the object model, to     which frames or windows on different domains should not     have access. (CVE-2018-8351)

  - An elevation of privilege vulnerability exists in     Microsoft browsers allowing sandbox escape. An attacker     who successfully exploited the vulnerability could use     the sandbox escape to elevate privileges on an affected     system. This vulnerability by itself does not allow     arbitrary code execution; however, it could allow     arbitrary code to be run if the attacker uses it in     combination with another vulnerability (such as a remote     code execution vulnerability or another elevation of     privilege vulnerability) that is capable of leveraging     the elevated privileges when code execution is     attempted. (CVE-2018-8357)

  - An Elevation of Privilege vulnerability exists when     Diagnostics Hub Standard Collector allows file creation     in arbitrary locations.  (CVE-2018-0952)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8353, CVE-2018-8371, CVE-2018-8373,     CVE-2018-8389)

  - A remote code execution vulnerability exists when     Microsoft Edge improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that enables an attacker to execute arbitrary code in     the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8377)

  - An information disclosure vulnerability exists in     Microsoft .NET Framework that could allow an attacker to     access information in multi-tenant environments. The     vulnerability is caused when .NET Framework is used in     high-load/high-density network connections where content     from one stream can blend into another stream.
    (CVE-2018-8360)

  - A spoofing vulnerability exists when Microsoft Edge     improperly handles specific HTML content. An attacker     who successfully exploited this vulnerability could     trick a user into believing that the user was on a     legitimate website. The specially crafted website could     either spoof content or serve as a pivot to chain an     attack with other vulnerabilities in web services.
    (CVE-2018-8388)

The remote Windows host is missing security update 4343888 or cumulative update 4343898. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     that Microsoft browsers access objects in memory. The     vulnerability could corrupt memory in a way that could     allow an attacker to execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8403)

  - An information disclosure vulnerability exists in     Microsoft .NET Framework that could allow an attacker to     access information in multi-tenant environments. The     vulnerability is caused when .NET Framework is used in     high-load/high-density network connections where content     from one stream can blend into another stream.
    (CVE-2018-8360)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2018-8341, CVE-2018-8348)

  - A remote code execution vulnerability exists when the     Windows font library improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited the vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-8344)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2018-8404)

  - A remote code execution vulnerability exists when     Internet Explorer improperly validates hyperlinks before     loading executable libraries. An attacker who     successfully exploited this vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2018-8316)

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8355, CVE-2018-8372, CVE-2018-8385)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8353, CVE-2018-8371, CVE-2018-8373,     CVE-2018-8389)

  - A remote code execution vulnerability exists in     Microsoft Windows that could allow remote code execution     if a .LNK file is processed. An attacker who     successfully exploited this vulnerability could gain the     same user rights as the local user.  (CVE-2018-8345)

  - An elevation of privilege vulnerability exists when the     DirectX Graphics Kernel (DXGKRNL) driver improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could run processes in an     elevated context.  (CVE-2018-8405)

  - An elevation of privilege vulnerability exists in the     Network Driver Interface Specification (NDIS) when     ndis.sys fails to check the length of a buffer prior to     copying memory to it.  (CVE-2018-8343)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2018-8394, CVE-2018-8398)

  - A remote code execution vulnerability exists in     &quot;Microsoft COM for Windows&quot; when it fails to     properly handle serialized objects. An attacker who     successfully exploited the vulnerability could use a     specially crafted file or script to perform actions. In     an email attack scenario, an attacker could exploit the     vulnerability by sending the specially crafted file to     the user and convincing the user to open the file.
    (CVE-2018-8349)

  - An elevation of privilege vulnerability exists in the     Windows Installer when the Windows Installer fails to     properly sanitize input leading to an insecure library     loading behavior. A locally authenticated attacker could     run arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights. The security update addresses the vulnerability     by correcting the input sanitization error to preclude     unintended elevation. (CVE-2018-8339)

  - A security feature bypass vulnerability exists when     Active Directory Federation Services (AD FS) improperly     handles multi-factor authentication requests.
    (CVE-2018-8340)

  - An information disclosure vulnerability exists when     affected Microsoft browsers improperly allow cross-frame     interaction. An attacker who successfully exploited this     vulnerability could allow an attacker to obtain browser     frame or window state from a different domain. For an     attack to be successful, an attacker must persuade a     user to open a malicious website from a secure website.
    This update addresses the vulnerability by denying     permission to read the state of the object model, to     which frames or windows on different domains should not     have access. (CVE-2018-8351)

The remote Windows host is missing security update 4343899 or cumulative update 4343900. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     that Microsoft browsers access objects in memory. The     vulnerability could corrupt memory in a way that could     allow an attacker to execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8403)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2018-8341, CVE-2018-8348)

  - An elevation of privilege vulnerability exists in the     Network Driver Interface Specification (NDIS) when     ndis.sys fails to check the length of a buffer prior to     copying memory to it.  (CVE-2018-8342, CVE-2018-8343)

  - A remote code execution vulnerability exists when     Internet Explorer improperly validates hyperlinks before     loading executable libraries. An attacker who     successfully exploited this vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights.
    (CVE-2018-8316)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2018-8394, CVE-2018-8396, CVE-2018-8398)

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8355, CVE-2018-8372, CVE-2018-8385)

  - A remote code execution vulnerability exists in     Microsoft Windows that could allow remote code execution     if a .LNK file is processed. An attacker who     successfully exploited this vulnerability could gain the     same user rights as the local user.  (CVE-2018-8345,     CVE-2018-8346)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8353, CVE-2018-8371, CVE-2018-8373,     CVE-2018-8389)

  - A remote code execution vulnerability exists in the way     that the Windows Graphics Device Interface (GDI) handles     objects in the memory. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-8397)

  - An elevation of privilege vulnerability exists in     Windows when the Win32k component fails to properly     handle objects in memory. An attacker who successfully     exploited this vulnerability could run arbitrary code in     kernel mode. An attacker could then install programs;
    view, change, or delete data; or create new accounts     with full user rights.  (CVE-2018-8404)

  - A remote code execution vulnerability exists in     &quot;Microsoft COM for Windows&quot; when it fails to     properly handle serialized objects. An attacker who     successfully exploited the vulnerability could use a     specially crafted file or script to perform actions. In     an email attack scenario, an attacker could exploit the     vulnerability by sending the specially crafted file to     the user and convincing the user to open the file.
    (CVE-2018-8349)

  - An elevation of privilege vulnerability exists in the     Windows Installer when the Windows Installer fails to     properly sanitize input leading to an insecure library     loading behavior. A locally authenticated attacker could     run arbitrary code with elevated system privileges. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights. The security update addresses the vulnerability     by correcting the input sanitization error to preclude     unintended elevation. (CVE-2018-8339)

  - An information disclosure vulnerability exists in     Microsoft .NET Framework that could allow an attacker to     access information in multi-tenant environments. The     vulnerability is caused when .NET Framework is used in     high-load/high-density network connections where content     from one stream can blend into another stream.
    (CVE-2018-8360)

  - An information disclosure vulnerability exists when     affected Microsoft browsers improperly allow cross-frame     interaction. An attacker who successfully exploited this     vulnerability could allow an attacker to obtain browser     frame or window state from a different domain. For an     attack to be successful, an attacker must persuade a     user to open a malicious website from a secure website.
    This update addresses the vulnerability by denying     permission to read the state of the object model, to     which frames or windows on different domains should not     have access. (CVE-2018-8351)

  - A remote code execution vulnerability exists when the     Windows font library improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited the vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-8344)

ID	Name	Product	Family	Published	Updated	Severity
112026	RHEL 7 : rhvm-appliance (RHSA-2018:2402)	Nessus	Red Hat Local Security Checks	8/21/2018	3/26/2025	medium
112234	Fedora 27 : xen (2018-915602df63) (Foreshadow)	Nessus	Fedora Local Security Checks	9/4/2018	3/25/2025	medium
194044	RHEL 5 : kernel (RHSA-2018:2602)	Nessus	Red Hat Local Security Checks	4/27/2024	2/19/2025	medium
120927	Fedora 28 : kernel / kernel-headers (2018-f8cba144ae) (Foreshadow)	Nessus	Fedora Local Security Checks	1/3/2019	3/21/2025	medium
123269	openSUSE Security Update : the Linux Kernel (openSUSE-2019-618) (Foreshadow)	Nessus	SuSE Local Security Checks	3/27/2019	6/11/2024	high
111789	Citrix XenServer Multiple Vulnerabilities (Foreshadow) (CTX236548)	Nessus	Misc.	8/16/2018	11/4/2019	critical
111684	KB4343885: Windows 10 Version 1703 August 2018 Security Update (Foreshadow)	Nessus	Windows : Microsoft Bulletins	8/14/2018	3/29/2022	high
111687	KB4343897: Windows 10 Version 1709 And Windows Server Version 1709 August 2018 Security Update (Foreshadow)	Nessus	Windows : Microsoft Bulletins	8/14/2018	3/29/2022	high
111688	KB4343888: Windows 8.1 and Windows Server 2012 R2 August 2018 Security Update (Foreshadow)	Nessus	Windows : Microsoft Bulletins	8/14/2018	6/17/2024	high
111689	KB4343899: Windows 7 and Windows Server 2008 R2 August 2018 Security Update (Foreshadow)	Nessus	Windows : Microsoft Bulletins	8/14/2018	6/17/2024	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

high

critical

high

high

high

high