The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3047 advisory.

  - zlib: Out-of-bounds pointer arithmetic in inftrees.c (CVE-2016-9840)

  - zlib: Out-of-bounds pointer arithmetic in inffast.c (CVE-2016-9841)

  - zlib: Undefined left shift of negative number (CVE-2016-9842)

  - zlib: Big-endian out-of-bounds pointer (CVE-2016-9843)

  - OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026) (CVE-2017-10274)

  - OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)     (CVE-2017-10281)

  - OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) (CVE-2017-10285)

  - Oracle JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) (CVE-2017-10293)

  - OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) (CVE-2017-10295)

  - OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370) (CVE-2017-10345)

  - OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711) (CVE-2017-10346)

  - OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)     (CVE-2017-10347)

  - OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432) (CVE-2017-10348)

  - OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)     (CVE-2017-10349)

  - OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612) (CVE-2017-10355)

  - OpenJDK: weak protection of key stores against brute forcing (Security, 8181692) (CVE-2017-10356)

  - OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)     (CVE-2017-10357)

  - OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794) (CVE-2017-10388)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for java-1_8_0-openjdk fixes the following issues :

  - Update to version jdk8u151 (icedtea 3.6.0) Security     issues fixed :

  - CVE-2017-10274: Handle smartcard clean up better     (bsc#1064071)

  - CVE-2017-10281: Better queuing priorities (bsc#1064072)

  - CVE-2017-10285: Unreferenced references (bsc#1064073)

  - CVE-2017-10295: Better URL connections (bsc#1064075)

  - CVE-2017-10388: Correct Kerberos ticket grants     (bsc#1064086)

  - CVE-2017-10346: Better invokespecial checks     (bsc#1064078)

  - CVE-2017-10350: Better Base Exceptions (bsc#1064082)

  - CVE-2017-10347: Better timezone processing (bsc#1064079)

  - CVE-2017-10349: Better X processing (bsc#1064081)

  - CVE-2017-10345: Better keystore handling (bsc#1064077)

  - CVE-2017-10348: Better processing of unresolved     permissions (bsc#1064080)

  - CVE-2017-10357: Process Proxy presentation (bsc#1064085)

  - CVE-2017-10355: More stable connection processing     (bsc#1064083)

  - CVE-2017-10356: Update storage implementations     (bsc#1064084)

  - CVE-2016-10165: Improve CMS header processing     (bsc#1064069)

  - CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,     CVE-2016-9843: Upgrade compression library (bsc#1064070)     Bug fixes :

  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and     overlayfs

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

The remote host is running a version of macOS that is prior to 10.13. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Apache
 - AppSandbox
 - AppleScript
 - Application Firewall
 - ATS
 - Audio
 - CFNetwork
 - CFNetwork Proxies
 - CFString
 - Captive Network Assistant
 - CoreAudio
 - CoreText
 - DesktopServices
 - Directory Utility
 - file
 - Fonts
 - fsck_msdos
 - HFS
 - Heimdal
 - HelpViewer
 - IOFireWireFamily
 - ImageIO
 - Installer
 - Kernel
 - kext tools
 - libarchive
 - libc
 - libexpat
 - Mail
 - Mail Drafts
 - ntp
 - Open Scripting Architecture
 - PCRE
 - Postfix
 - Quick Look
 - QuickTime
 - Remote Management
 - SQLite
 - Sandbox
 - Screen Lock
 - Security
 - Spotlight
 - WebKit
 - zlib

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Published	Updated	Severity
104140	RHEL 7 : java-1.6.0-sun (RHSA-2017:3047)	Nessus	Red Hat Local Security Checks	10/25/2017	4/27/2024	critical
104531	SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2017:2989-1)	Nessus	SuSE Local Security Checks	11/13/2017	1/6/2021	critical
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	4/17/2019	4/17/2019	critical
700511	macOS < 10.13 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	4/10/2019	4/10/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical