The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3605 advisory.

    - dentry name snapshots (Al Viro)  [Orabug: 26630936]  {CVE-2017-7533}
    - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug:
    26621179]  {CVE-2016-9604} {CVE-2016-9604}
    - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26621176]     {CVE-2016-10200}
    - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26621171]     {CVE-2016-6213} {CVE-2016-6213}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - dentry name snapshots (Al Viro) [Orabug: 26630936]     (CVE-2017-7533)

  - scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle     Fortin) 

  - mm: introduce kv[mz]alloc helpers (Kyle Fortin) [Orabug:
    26621191]

  - KEYS: Disallow keyrings beginning with '.' to be joined     as session keyrings (David Howells) [Orabug: 26621179]     (CVE-2016-9604) (CVE-2016-9604)

  - l2tp: fix racy SOCK_ZAPPED flag check in     l2tp_ip[,6]_bind (Guillaume Nault) [Orabug: 26621176]     (CVE-2016-10200)

  - mnt: Add a per mount namespace limit on the number of     mounts (Eric W. Biederman) [Orabug: 26621171]     (CVE-2016-6213) (CVE-2016-6213)

  - ipv6: fix out of bound writes in __ip6_append_data (Eric     Dumazet) [Orabug: 26621163] (CVE-2017-9242)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0174 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0145 for details.

ID	Name	Product	Family	Published	Updated	Severity
102572	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3605)	Nessus	Oracle Linux Local Security Checks	8/18/2017	10/22/2024	high
102573	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0143)	Nessus	OracleVM Local Security Checks	8/18/2017	1/4/2021	high
105248	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash)	Nessus	OracleVM Local Security Checks	12/14/2017	1/4/2021	high
102774	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)	Nessus	OracleVM Local Security Checks	8/25/2017	1/4/2021	critical

Detections

Analytics

Plugins Search

high

high

high

critical