The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003368 advisory.

    The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations,     which allows local users to cause a denial of service (system hang) by leveraging access to a container     environment for executing a crafted application, as demonstrated by trinity.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3640 advisory.

    - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001717]  {CVE-2017-2618}     {CVE-2017-2618} {CVE-2017-2618}
    - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036903]     {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191}
    - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050248]  {CVE-2017-12192}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3208-2 advisory.

    USN-3208-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu     14.04 LTS.

    It was discovered that the generic SCSI block layer in the Linux kernel did not properly restrict write     operations in certain situations. A local attacker could use this to cause a denial of service (system     crash) or possibly gain administrative privileges. (CVE-2016-10088)

    CAI Qian discovered that the sysctl implementation in the Linux kernel did not properly perform reference     counting in some situations. An unprivileged attacker could use this to cause a denial of service (system     hang). (CVE-2016-9191)

    Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF     exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service (guest     OS crash). (CVE-2016-9588)

    Andy Lutomirski and Willy Tarreau discovered that the KVM implementation in the Linux kernel did not     properly emulate instructions on the SS segment register. A local attacker in a guest virtual machine     could use this to cause a denial of service (guest OS crash) or possibly gain administrative privileges in     the guest OS. (CVE-2017-2583)

    Dmitry Vyukov discovered that the KVM implementation in the Linux kernel improperly emulated certain     instructions. A local attacker could use this to obtain sensitive information (kernel memory).
    (CVE-2017-2584)

    It was discovered that the KLSI KL5KUSB105 serial-to-USB device driver in the Linux kernel did not     properly initialize memory related to logging. A local attacker could use this to expose sensitive     information (kernel memory). (CVE-2017-5549)

    Andrey Konovalov discovered a use-after-free vulnerability in the DCCP implementation in the Linux kernel.
    A local attacker could use this to cause a denial of service (system crash) or possibly gain     administrative privileges. (CVE-2017-6074)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0174 for details.

ID	名稱	產品	系列	已發布	已更新	嚴重性
286899	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003368)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/16	medium
104565	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3640)	Nessus	Oracle Linux Local Security Checks	2017/11/15	2026/2/9	medium
97323	Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3208-2)	Nessus	Ubuntu Local Security Checks	2017/2/22	2024/8/27	high
105248	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash)	Nessus	OracleVM Local Security Checks	2017/12/14	2025/11/11	high

偵測

搜尋 Plugin

medium

medium

high

high