The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix utrace dead_engine ops race

  - fix ptrace_attach leak

  - CVE-2007-5093: kernel PWC driver DoS

  - CVE-2007-6282: IPSec ESP kernel panics

  - CVE-2007-6712: kernel: infinite loop in highres timers     (kernel hang)

  - CVE-2008-1615: kernel: ptrace: Unprivileged crash on     x86_64 %cs corruption

  - CVE-2008-1294: kernel: setrlimit(RLIMIT_CPUINFO) with     zero value doesn't inherit properly across children

  - CVE-2008-2136: kernel: sit memory leak

  - CVE-2008-2812: kernel: NULL ptr dereference in multiple     network drivers due to missing checks in tty code

  - restore     linux-2.6-x86-clear-df-flag-for-signal-handlers.patch

  - restore linux-2.6-utrace.patch /     linux-2.6-xen-utrace.patch

  - Kernel security erratas for OVM 2.1.2 from bz#5932 :

  - CVE-2007-6063: isdn: fix possible isdn_net buffer     overflows

  - CVE-2007-3104 Null pointer to an inode in a dentry can     cause an oops in sysfs_readdir

  - CVE-2008-0598: write system call vulnerability

  - CVE-2008-1375: kernel: race condition in dnotify

  - CVE-2008-0001: kernel: filesystem corruption by     unprivileged user via directory truncation

  - CVE-2008-2358: dccp: sanity check feature length

  - CVE-2007-5938: NULL dereference in iwl driver

  - RHSA-2008:0508: kernel: [x86_64] The string instruction     version didn't zero the output on exception.

  - kernel: clear df flag for signal handlers

  - fs: missing dput in do_lookup error leaks dentries

  - sysfs: fix condition check in sysfs_drop_dentry

  - sysfs: fix race condition around sd->s_dentry

  - ieee80211: off-by-two integer underflow

From Red Hat Security Advisory 2008:0508 :

Updated kernel packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

These updated packages fix the following security issues :

* A security flaw was found in the Linux kernel memory copy routines, when running on certain AMD64 systems. If an unsuccessful attempt to copy kernel memory from source to destination memory locations occurred, the copy routines did not zero the content at the destination memory location. This could allow a local unprivileged user to view potentially sensitive data. (CVE-2008-2729, Important)

* Alexey Dobriyan discovered a race condition in the Linux kernel process-tracing system call, ptrace. A local unprivileged user could use this flaw to cause a denial of service (kernel hang).
(CVE-2008-2365, Important)

* Tavis Ormandy discovered a deficiency in the Linux kernel 32-bit and 64-bit emulation. This could allow a local unprivileged user to prepare and run a specially crafted binary, which would use this deficiency to leak uninitialized and potentially sensitive data.
(CVE-2008-0598, Important)

* It was discovered that the Linux kernel handled string operations in the opposite way to the GNU Compiler Collection (GCC). This could allow a local unprivileged user to cause memory corruption.
(CVE-2008-1367, Low)

As well, these updated packages fix the following bug :

* On systems with a large number of CPUs (more than 16), multiple applications calling the 'times()' system call may have caused a system hang.

Red Hat Enterprise Linux 4 users are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service.
(CVE-2007-6282)

Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. A local attacker could request a large expiration value and cause the system to hang, leading to a denial of service. (CVE-2007-6712)

Tavis Ormandy discovered that the ia32 emulation under 64bit kernels did not fully clear uninitialized data. A local attacker could read private kernel memory, leading to a loss of privacy. (CVE-2008-0598)

Jan Kratochvil discovered that PTRACE did not correctly handle certain calls when running under 64bit kernels. A local attacker could exploit this to crash the system, leading to a denial of service.
(CVE-2008-1615)

Wei Wang discovered that the ASN.1 decoding routines in CIFS and SNMP NAT did not correctly handle certain length values. Remote attackers could exploit this to execute arbitrary code or crash the system.
(CVE-2008-1673)

Paul Marks discovered that the SIT interfaces did not correctly manage allocated memory. A remote attacker could exploit this to fill all available memory, leading to a denial of service. (CVE-2008-2136)

David Miller and Jan Lieskovsky discovered that the Sparc kernel did not correctly range-check memory regions allocated with mmap. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2008-2137)

The sys_utimensat system call did not correctly check file permissions in certain situations. A local attacker could exploit this to modify the file times of arbitrary files which could lead to a denial of service. (CVE-2008-2148)

Brandon Edwards discovered that the DCCP system in the kernel did not correctly check feature lengths. A remote attacker could exploit this to execute arbitrary code. (CVE-2008-2358)

A race condition was discovered between ptrace and utrace in the kernel. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2008-2365)

The copy_to_user routine in the kernel did not correctly clear memory destination addresses when running on 64bit kernels. A local attacker could exploit this to gain access to sensitive kernel memory, leading to a loss of privacy. (CVE-2008-2729)

The PPP over L2TP routines in the kernel did not correctly handle certain messages. A remote attacker could send a specially crafted packet that could crash the system or execute arbitrary code.
(CVE-2008-2750)

Gabriel Campana discovered that SCTP routines did not correctly check for large addresses. A local user could exploit this to allocate all available memory, leading to a denial of service. (CVE-2008-2826).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of the SUSE Linux Enterprise 10 Service Pack 1 kernel contains lots of bugfixes and several security fixes :

  - Added missing capability checks in sbni_ioctl().
    (CVE-2008-3525)

  - On AMD64 some string operations could leak kernel     information into userspace. (CVE-2008-0598)

  - Added range checking in ASN.1 handling for the CIFS and     SNMP NAT netfilter modules. (CVE-2008-1673)

  - Fixed range checking in the snd_seq OSS ioctl, which     could be used to leak information from the kernel.
    (CVE-2008-3272)

  - Fixed a memory leak when looking up deleted directories     which could be used to run the system out of memory.
    (CVE-2008-3275)

  - The do_change_type function in fs/namespace.c did not     verify that the caller has the CAP_SYS_ADMIN capability,     which allows local users to gain privileges or cause a     denial of service by modifying the properties of a     mountpoint. (CVE-2008-2931)

  - Various NULL ptr checks have been added to the tty ops     functions, which might have been used by local attackers     to execute code. We think that this affects only devices     openable by root, so the impact is limited.
    (CVE-2008-2812)

This SUSE Linux Enterprise 10 SP3 kernel update fixes a severe regression introduced by previous bugfix updates that would corrupt NFSv4 mounted data.

The update also fixes several other bugs and following security issue :

  - drivers/net/r8169.c in the r8169 driver of Linux kernel     2.6.32.3 and earlier does not properly check the size of     an Ethernet frame that exceeds the maximum transmission     unit (MTU), which allows remote attackers to.
    (CVE-2009-4537)

    1. cause a denial of service (temporary network outage)     via a packet with a crafted size, in conjunction with     certain packets containing A characters and certain     packets containing E characters; or 2. cause a denial of     service (system crash) via a packet with a crafted size,     in conjunction with certain packets containing '0'     characters, related to the value of the status register     and erroneous behavior associated with the RxMaxSize     register.

  - An information leak in 32bit emulation on x86_64     machines could disclose sensitive information to local     attackers. (CVE-2008-0598)

These updated packages fix the following security issues :

  - A security flaw was found in the Linux kernel memory     copy routines, when running on certain AMD64 systems. If     an unsuccessful attempt to copy kernel memory from     source to destination memory locations occurred, the     copy routines did not zero the content at the     destination memory location. This could allow a local     unprivileged user to view potentially sensitive data.
    (CVE-2008-2729, Important)

  - Alexey Dobriyan discovered a race condition in the Linux     kernel process-tracing system call, ptrace. A local     unprivileged user could use this flaw to cause a denial     of service (kernel hang). (CVE-2008-2365, Important)

  - Tavis Ormandy discovered a deficiency in the Linux     kernel 32-bit and 64-bit emulation. This could allow a     local unprivileged user to prepare and run a specially     crafted binary, which would use this deficiency to leak     uninitialized and potentially sensitive data.
    (CVE-2008-0598, Important)

  - It was discovered that the Linux kernel handled string     operations in the opposite way to the GNU Compiler     Collection (GCC). This could allow a local unprivileged     user to cause memory corruption. (CVE-2008-1367, Low)

As well, these updated packages fix the following bug :

  - On systems with a large number of CPUs (more than 16),     multiple applications calling the 'times()' system call     may have caused a system hang.

a. Service Console update for DHCP and third-party library update    for DHCP client.

   DHCP is an Internet-standard protocol by which a computer can be    connected to a local network, ask to be given configuration    information, and receive from a server enough information to    configure itself as a member of that network.

   A stack-based buffer overflow in the script_write_params method in    ISC DHCP dhclient allows remote DHCP servers to execute arbitrary    code via a crafted subnet-mask option.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0692 to this issue.

   An insecure temporary file use flaw was discovered in the DHCP    daemon's init script ('/etc/init.d/dhcpd'). A local attacker could    use this flaw to overwrite an arbitrary file with the output of the    'dhcpd -t' command via a symbolic link attack, if a system    administrator executed the DHCP init script with the 'configtest',    'restart', or 'reload' option.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-1893 to this issue.

b. Updated Service Console package kernel

   Service Console package kernel update to version    kernel-2.4.21-58.EL.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-4210, CVE-2008-3275, CVE-2008-0598,    CVE-2008-2136, CVE-2008-2812, CVE-2007-6063, CVE-2008-3525 to the    security issues fixed in kernel-2.4.21-58.EL

c. JRE Security Update

   JRE update to version 1.5.0_18, which addresses multiple security    issues that existed in earlier releases of JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the following names to the security issues fixed in    JRE 1.5.0_17: CVE-2008-2086, CVE-2008-5347, CVE-2008-5348,    CVE-2008-5349, CVE-2008-5350, CVE-2008-5351, CVE-2008-5352,    CVE-2008-5353, CVE-2008-5354, CVE-2008-5356, CVE-2008-5357,    CVE-2008-5358, CVE-2008-5359, CVE-2008-5360, CVE-2008-5339,    CVE-2008-5342, CVE-2008-5344, CVE-2008-5345, CVE-2008-5346,    CVE-2008-5340, CVE-2008-5341, CVE-2008-5343, and CVE-2008-5355.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the following names to the security issues fixed in    JRE 1.5.0_18: CVE-2009-1093, CVE-2009-1094, CVE-2009-1095,    CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099,    CVE-2009-1100, CVE-2009-1101, CVE-2009-1102, CVE-2009-1103,    CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, and CVE-2009-1107.

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 3.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

This update addresses the following security issues :

* Tavis Ormandy discovered a deficiency in the Linux kernel 32-bit and 64-bit emulation. This could allow a local, unprivileged user to prepare and run a specially crafted binary which would use this deficiency to leak uninitialized and potentially sensitive data.
(CVE-2008-0598, Important)

* a possible kernel memory leak was found in the Linux kernel Simple Internet Transition (SIT) INET6 implementation. This could allow a local, unprivileged user to cause a denial of service. (CVE-2008-2136, Important)

* missing capability checks were found in the SBNI WAN driver which could allow a local user to bypass intended capability restrictions.
(CVE-2008-3525, Important)

* the do_truncate() and generic_file_splice_write() functions did not clear the setuid and setgid bits. This could allow a local, unprivileged user to obtain access to privileged information.
(CVE-2008-4210, Important)

* a buffer overflow flaw was found in Integrated Services Digital Network (ISDN) subsystem. A local, unprivileged user could use this flaw to cause a denial of service. (CVE-2007-6063, Moderate)

* multiple NULL pointer dereferences were found in various Linux kernel network drivers. These drivers were missing checks for terminal validity, which could allow privilege escalation. (CVE-2008-2812, Moderate)

* a deficiency was found in the Linux kernel virtual filesystem (VFS) implementation. This could allow a local, unprivileged user to attempt file creation within deleted directories, possibly causing a denial of service. (CVE-2008-3275, Moderate)

This update also fixes the following bugs :

* the incorrect kunmap function was used in nfs_xdr_readlinkres.
kunmap() was used where kunmap_atomic() should have been. As a consequence, if an NFSv2 or NFSv3 server exported a volume containing a symlink which included a path equal to or longer than the local system's PATH_MAX, accessing the link caused a kernel oops. This has been corrected in this update.

* mptctl_gettargetinfo did not check if pIoc3 was NULL before using it as a pointer. This caused a kernel panic in mptctl_gettargetinfo in some circumstances. A check has been added which prevents this.

* lost tick compensation code in the timer interrupt routine triggered without apparent cause. When running as a fully-virtualized client, this spurious triggering caused the 64-bit version of Red Hat Enterprise Linux 3 to present highly inaccurate times. With this update the lost tick compensation code is turned off when the operating system is running as a fully-virtualized client under Xen or VMware(r).

All Red Hat Enterprise Linux 3 users should install this updated kernel which addresses these vulnerabilities and fixes these bugs.

这些更新后的程序包修复以下安全问题：

- 运行某些 AMD64 系统时，在 Linux 内核内存复制例程中发现安全缺陷。如果未能成功地将内核内存从源复制到目的地内存位置，复制例程不会清除目的地内存位置中的内容。这可导致本地非特权用户查看可能敏感的数据。
 （CVE-2008-2729，重要）

- Alexey Dobriyan 在 Linux 内核进程跟踪系统调用 ptrace 中发现了一个争用条件。本地非特权用户可利用此缺陷造成拒绝服务（内核挂起）。（CVE-2008-2365，重要）

- Tavis Ormandy 在 Linux 内核 32 位和 64 位仿真中发现了一个缺陷。这可导致本地非特权用户准备和运行特别构建的二进制，从而利用此缺陷泄露非初始化和可能敏感的数据。
 （CVE-2008-0598，重要）

- 已发现 Linux 内核处理字符串运算的方式与 GNU Compiler Collection (GCC) 的方式相反。这可导致本地非特权用户引发内存损坏。（CVE-2008-1367，低危）

同样，这些更新后的程序包还修复以下缺陷：

- 在搭载了大量 CPU（超过 16 个）的系统上，多个应用程序调用“times()”系统调用可能造成系统挂起。

SUSE Linux Enterprise 10 Service Pack 1 内核的此更新包含大量缺陷补丁和多个安全补丁：

- 在 sbni_ioctl() 中添加了缺少的功能检查。
 (CVE-2008-3525)

- 在 AMD64 上，某些字符串操作可将内核信息泄漏到用户空间。(CVE-2008-0598)

- 在 CIFS 和 SNMP NAT netfilter 模块的 ASN.1 处理中添加了范围检查。(CVE-2008-1673)

- 修复了 snd_seq OSS ioctl 中的范围检查，该问题可被用于泄漏内核中的信息。
 (CVE-2008-3272)

- 修复了查找已删除目录时发生的内存泄漏，该问题可被用于耗尽系统内存。
 (CVE-2008-3275)

- fs/namespace.c 中的 do_change_type 函数未验证调用者是否具备 CAP_SYS_ADMIN 功能，这样允许本地用户通过修改挂载点的属性来获得权限或造成拒绝服务。(CVE-2008-2931)

- 向 tty ops 函数添加了各种空指针检查，这些函数可能被本地攻击者用于执行代码。我们认为此问题仅影响可由根打开的设备，因此影响有限。
 (CVE-2008-2812)

SUSE Linux Enterprise 10 SP3 内核的此更新修复了之前将损坏 NFSv4 挂载数据的缺陷补丁更新导致的多个回归。

此更新还修复了多个其他缺陷和以下安全问题：

- 在 2.6.32.3 及更低版本的Linux 内核中，r8169 驱动程序中的 drivers/net/r8169.c 未正确检查超过最大传输单元(MTU) 的以太网帧的大小，远程攻击者可利用此缺陷：
 (CVE-2009-4537)

1. 通过构建大小的数据包连同包含 A 字符的特定数据包以及包含 E 字符的特定数据包来造成拒绝服务（临时网络中断）；或 2. 通过构建大小的数据包连同包含“0”字符的特定数据包来造成拒绝服务（系统崩溃），此问题与状态寄存器的值和 RxMaxSize 寄存器关联的错误行为有关。

- x86_64 机器上的 32 位仿真存在信息泄露，可导致将敏感信息泄露给本地攻击者。(CVE-2008-0598)

远程 OracleVM 系统缺少必要修补程序来解决关键安全更新：

- 修复 utrace dead_engine ops 争用

- 修复 ptrace_attach 泄漏

- CVE-2007-5093：内核 PWC 驱动程序 DoS

- CVE-2007-6282：IPSec ESP 内核错误

- CVE-2007-6712：kernel：highres 定时器中的无限循环（kernel 挂起）

- CVE-2008-1615：kernel：ptrace：x86_64 %cs 损坏中的非特权崩溃

- CVE-2008-1294：kernel：含有零值的 setrlimit(RLIMIT_CPUINFO) 在子项间未正确继承

- CVE-2008-2136：kernel：sit 内存泄漏

- CVE-2008-2812：kernel：多个网络驱动程序中因 tty 代码中缺少检查而造成空指针取消引用

- 恢复 linux-2.6-x86-clear-df-flag-for-signal-handlers.patch

- 恢复 linux-2.6-utrace.patch / linux-2.6-xen-utrace.patch

- bz#5932 中针对 OVM 2.1.2 的内核安全勘误表：

- CVE-2007-6063：isdn：修复可能的 isdn_net 缓冲区溢出

- CVE-2007-3104 dentry 的 inode 中的空指针可造成 sysfs_readdir 中 oops

- CVE-2008-0598：写入系统调用漏洞

- CVE-2008-1375：kernel：dnotify 中的争用条件

- CVE-2008-0001：kernel：非特权用户通过目录截断造成的文件系统损坏

- CVE-2008-2358：dccp：健全性检查功能长度

- CVE-2007-5938：iwl 驱动程序中的空取消引用

- RHSA-2008:0508：kernel：[x86_64] 字符串指令版本在发生异常时不将输出归零。

- kernel：清除用于信号处理程序的 df 标记

- fs：do_lookup 错误泄漏 dentries 中缺少 dput

- sysfs：修复 sysfs_drop_dentry 中的条件检查

- sysfs：修复关于 sd->s_dentry 的争用条件

- ieee80211：差二整数下溢

来自 Red Hat 安全公告 2008:0508：

更新后的 kernel 程序包修复了多个安全问题和一个缺陷，现在可用于 Red Hat Enterprise Linux 4。

Red Hat 安全响应团队将此更新评级为具有重要安全影响。

kernel 程序包包含 Linux 内核，后者是任何 Linux 操作系统的核心。

这些更新后的程序包修复以下安全问题：

* 在某些 AMD64 系统上运行的 Linux 内核内存复制例程中发现一个安全缺陷。如果未能成功地将内核内存从源复制到目的地内存位置，复制例程不会清除目的地内存位置中的内容。这可导致本地非特权用户查看可能敏感的数据。（CVE-2008-2729，重要）

* Alexey Dobriyan 在 Linux 内核进程跟踪系统调用 ptrace 中发现了一个争用条件。本地非特权用户可利用此缺陷造成拒绝服务（内核挂起）。
（CVE-2008-2365，重要）

* Tavis Ormandy 在 Linux 内核 32 位和 64 位仿真中发现一个缺陷。这可导致本地非特权用户准备和运行特别构建的二进制，从而利用此缺陷泄露非初始化和可能敏感的数据。
（CVE-2008-0598，重要）

* 已发现 Linux 内核处理字符串运算的方式与 GNU 编译器集合 (GCC) 的方式相反。这可导致本地非特权用户引发内存损坏。
（CVE-2008-1367，低危）

同样，这些更新后的程序包还修复以下缺陷：

* 在搭载了大量 CPU（超过 16 个）的系统中，多种调用“times()”系统调用的应用程序可导致系统挂起。

建议 Red Hat Enterprise Linux 4 用户升级这些更新后的程序包，其中包含用于解决这些问题的向后移植的修补程序。

a. 用于 DHCP 的服务控制台更新和用于 DHCP 客户端的第三方库更新。

   DHCP 是一种 Internet 标准协议，计算机可利用此协议连接到本地网络，要求提供配置信息并从服务器接收足够信息，以便将自身配置为该网络的成员。

   ISC DHCP dhclient 的 script_write_params 方法中存在一个基于堆栈的缓冲区溢出问题，可允许远程 DHCP 服务器通过构建的子网掩码选项来执行任意代码。

   通用漏洞和暴露计划 (cve.mitre.org) 已为此问题分配了名称 CVE-2009-0692。

   在 DHCP 后台程序的 init 脚本 ('/etc/init.d/dhcpd') 中发现不安全的临时文件使用缺陷。如果系统管理员通过“configtest”、“restart”或“reload”选项执行 DHCP init 脚本，则本地攻击者可利用此缺陷，通过符号链接攻击以使用“dhcpd -t”命令的输出来覆盖任意文件。

   通用漏洞和暴露计划 (cve.mitre.org) 已为此问题分配了名称 CVE-2009-1893。

b. 更新后的服务控制台程序包内核

   服务控制台程序包内核已更新到 kernel-2.4.21-58.EL 版。

   通用漏洞和暴露计划 (cve.mitre.org) 为在内核 kernel-2.4.21-58.EL 中修复的安全问题分配了名称 CVE-2008-4210、CVE-2008-3275、CVE-2008-0598、CVE-2008-2136、CVE-2008-2812、CVE-2007-6063、CVE-2008-3525

c. JRE 安全更新

   JRE 更新到版本 1.5.0_18，解决了较早的 JRE 中存在的多种安全问题。

   通用漏洞和暴露计划 (cve.mitre.org) 已将下列名称分配给 JRE 1.5.0_17 中修复的安全问题：CVE-2008-2086、CVE-2008-5347、CVE-2008-5348、CVE-2008-5349、CVE-2008-5350、CVE-2008-5351、CVE-2008-5352、CVE-2008-5353、CVE-2008-5354、CVE-2008-5356、CVE-2008-5357、CVE-2008-5358、CVE-2008-5359、CVE-2008-5360、CVE-2008-5339、CVE-2008-5342、CVE-2008-5344、CVE-2008-5345、CVE-2008-5346、CVE-2008-5340、CVE-2008-5341、CVE-2008-5343 和 CVE-2008-5355。

   通用漏洞和暴露计划 (cve.mitre.org) 已将下列名称分配给 JRE 1.5.0_18 中修复的安全问题：CVE-2009-1093、CVE-2009-1094、CVE-2009-1095、CVE-2009-1096、CVE-2009-1097、CVE-2009-1098、CVE-2009-1099、CVE-2009-1100、CVE-2009-1101、CVE-2009-1102、CVE-2009-1103、CVE-2009-1104、CVE-2009-1105、CVE-2009-1106 和 CVE-2009-1107。

The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2008-0973.

The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2008-0508.

The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2008-0519.

ID	名稱	產品	系列	已發布	已更新	嚴重性
79447	OracleVM 2.1 : kernel (OVMSA-2008-2005)	Nessus	OracleVM Local Security Checks	2014/11/26	2021/1/14	high
67703	Oracle Linux 4 : kernel (ELSA-2008-0508)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/8/24	high
33531	Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/20/22 vulnerabilities (USN-625-1)	Nessus	Ubuntu Local Security Checks	2008/7/17	2021/1/19	critical
59131	SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5608)	Nessus	SuSE Local Security Checks	2012/5/17	2021/1/14	critical
59149	SuSE 10 Security Update : the Linux kernel (x86_64) (ZYPP Patch Number 7063)	Nessus	SuSE Local Security Checks	2012/5/17	2021/1/14	high
60429	Scientific Linux Security Update : kernel on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
42179	VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues	Nessus	VMware ESX Local Security Checks	2009/10/19	2021/1/6	high
35190	RHEL 3 : kernel (RHSA-2008:0973)	Nessus	Red Hat Local Security Checks	2008/12/17	2021/1/14	high
60429	Scientific Linux 安全更新：SL4.x i386/x86_64 中的 kernel	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
59131	SuSE 10 安全更新：Linux 内核（ZYPP 修补程序编号 5608）	Nessus	SuSE Local Security Checks	2012/5/17	2021/1/14	critical
59149	SuSE 10 安全更新：Linux 内核 (x86_64)（ZYPP 修补程序编号 7063）	Nessus	SuSE Local Security Checks	2012/5/17	2021/1/14	high
79447	OracleVM 2.1：kernel (OVMSA-2008-2005)	Nessus	OracleVM Local Security Checks	2014/11/26	2021/1/14	high
67703	Oracle Linux 4：kernel (ELSA-2008-0508)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/8/24	high
42179	VMSA-2009-0014 : 用于 DHCP、服务控制台内核及 JRE 的 VMware ESX 修补程序解决了多个安全问题	Nessus	VMware ESX Local Security Checks	2009/10/19	2021/1/6	high
801460	CentOS RHSA-2008-0973 Security Check	Log Correlation Engine	Generic			high
801453	CentOS RHSA-2008-0508 Security Check	Log Correlation Engine	Generic			high
801454	CentOS RHSA-2008-0519 Security Check	Log Correlation Engine	Generic			high

偵測

搜尋 Plugin

high

high

critical

critical

high

high

high

high

high

critical

high

high

high

high

high

high

high