The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in     inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code     and gain privileges. (CVE-2017-17712)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001563 advisory.

    The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in     inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code     and gain privileges.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0035 for details.

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.114 to receive various security and bugfixes. The following security bugs were fixed :

  - CVE-2017-5715: Systems with microprocessors utilizing     speculative execution and indirect branch prediction may     allow unauthorized disclosure of information to an     attacker with local user access via a side-channel     analysis (bnc#1068032). The previous fix using CPU     Microcode has been complemented by building the Linux     Kernel with return trampolines aka 'retpolines'.

  - CVE-2017-15129: A use-after-free vulnerability was found     in network namespaces code affecting the Linux kernel     The function get_net_ns_by_id() in     net/core/net_namespace.c did not check for the     net::count value after it has found a peer network in     netns_ids idr, which could lead to double free and     memory corruption. This vulnerability could allow an     unprivileged local user to induce kernel memory     corruption on the system, leading to a crash. Due to the     nature of the flaw, privilege escalation cannot be fully     ruled out, although it is thought to be unlikely     (bnc#1074839).

  - CVE-2017-17712: The raw_sendmsg() function in     net/ipv4/raw.c in the Linux kernel has a race condition     in inet->hdrincl that leads to uninitialized stack     pointer usage; this allowed a local user to execute code     and gain privileges (bnc#1073229).

  - CVE-2017-17862: kernel/bpf/verifier.c in the Linux     kernel ignored unreachable code, even though it would     still be processed by JIT compilers. This behavior, also     considered an improper branch-pruning logic issue, could     possibly be used by local users for denial of service     (bnc#1073928).

  - CVE-2017-17864: kernel/bpf/verifier.c in the Linux     kernel mishandled states_equal comparisons between the     pointer data type and the UNKNOWN_VALUE data type, which     allowed local users to obtain potentially sensitive     address information, aka a 'pointer leak (bnc#1073928).

  - CVE-2017-18017: The tcpmss_mangle_packet function in     net/netfilter/xt_TCPMSS.c in the Linux kernel allowed     remote attackers to cause a denial of service     (use-after-free and memory corruption) or possibly have     unspecified other impact by leveraging the presence of     xt_TCPMSS in an iptables action (bnc#1074488).

  - CVE-2018-1000004: In the Linux kernel a race condition     vulnerability existed in the sound system, this can lead     to a deadlock and denial of service condition     (bnc#1076017).

  - CVE-2018-5332: In the Linux kernel the     rds_message_alloc_sgs() function did not validate a     value that is used during DMA page allocation, leading     to a heap-based out-of-bounds write (related to the     rds_rdma_extra_size function in net/rds/rdma.c)     (bnc#1075621).

  - CVE-2018-5333: In the Linux kernel the rds_cmsg_atomic     function in net/rds/rdma.c mishandled cases where page     pinning fails or an invalid address is supplied, leading     to an rds_atomic_free_op NULL pointer dereference     (bnc#1075617).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3581-2 advisory.

    USN-3581-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04     LTS.

    Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race     condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of     service or possibly execute arbitrary code. (CVE-2017-17712)

    ChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in     the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code, (CVE-2017-15115)

    Mohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2017-8824)

    USN-3541-2 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 16.04 LTS.
    This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3582-1 advisory.

    Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race     condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of     service or possibly execute arbitrary code. (CVE-2017-17712)

    Laurent Guerby discovered that the mbcache feature in the ext2 and ext4 filesystems in the Linux kernel     improperly handled xattr block caching. A local attacker could use this to cause a denial of service.
    (CVE-2015-8952)

    Vitaly Mayatskikh discovered that the SCSI subsystem in the Linux kernel did not properly track reference     counts when merging buffers. A local attacker could use this to cause a denial of service (memory     exhaustion). (CVE-2017-12190)

    ChunYu Wang discovered that a use-after-free vulnerability existed in the SCTP protocol implementation in     the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code, (CVE-2017-15115)

    Mohamed Ghannam discovered a use-after-free vulnerability in the DCCP protocol implementation in the Linux     kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute     arbitrary code. (CVE-2017-8824)

    USN-3540-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 16.04 LTS.
    This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002950 advisory.

    The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in     inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code     and gain privileges.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
106740	openSUSE Security Update : the Linux Kernel (openSUSE-2018-153) (Spectre)	Nessus	SuSE Local Security Checks	2018/2/12	2025/10/29	critical
244724	Linux Distros Unpatched Vulnerability : CVE-2017-17712	Nessus	Misc.	2025/8/7	2026/7/17	high
290816	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001563)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/16	high
109158	OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0035) (Dirty COW) (Meltdown) (Spectre)	Nessus	OracleVM Local Security Checks	2018/4/19	2024/10/30	high
106748	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:0416-1) (Spectre)	Nessus	SuSE Local Security Checks	2018/2/12	2025/10/29	critical
106970	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3581-2)	Nessus	Ubuntu Local Security Checks	2018/2/23	2026/6/3	high
106972	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3582-1)	Nessus	Ubuntu Local Security Checks	2018/2/23	2024/10/29	high
287261	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002950)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/16	high

偵測

搜尋 Plugin

critical

high

high

high

critical

high

high

high