The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0100 for details.

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A use-after-free flaw was found in the way the Linux     kernel's key management subsystem handled keyring     object reference counting in certain error path of the     join_session_keyring() function. A local, unprivileged     user could use this flaw to escalate their privileges     on the system.(CVE-2016-0728)

  - A flaw was found in the way the Linux kernel's ASN.1     DER decoder processed certain certificate files with     tags of indefinite length. A local, unprivileged user     could use a specially crafted X.509 certificate DER     file to crash the system or, potentially, escalate     their privileges on the system.(CVE-2016-0758)

  - The LIST_POISON feature in include/linux/poison.h in     the Linux kernel before 4.3, as used in Android 6.0.1     before 2016-03-01, does not properly consider the     relationship to the mmap_min_addr value, which makes it     easier for attackers to bypass a poison-pointer     protection mechanism by triggering the use of an     uninitialized list entry, aka Android internal bug     26186802, a different vulnerability than     CVE-2015-3636.(CVE-2016-0821)

  - The pagemap_open function in fs/proc/task_mmu.c in the     Linux kernel before 3.19.3, as used in Android 6.0.1     before 2016-03-01, allows local users to obtain     sensitive physical-address information by reading a     pagemap file, aka Android internal bug     25739721.(CVE-2016-0823)

  - The aio_mount function in fs/aio.c in the Linux kernel     does not properly restrict execute access, which makes     it easier for local users to bypass intended SELinux     W^X policy restrictions.(CVE-2016-10044)

  - It was found that the fix for CVE-2016-9576 was     incomplete: the Linux kernel's sg implementation did     not properly restrict write operations in situations     where the KERNEL_DS option is set. A local attacker to     read or write to arbitrary kernel memory locations or     cause a denial of service (use-after-free) by     leveraging write access to a /dev/sg     device.(CVE-2016-10088)

  - A use-after-free flaw was found in the Linux kernel     which enables a race condition in the L2TPv3 IP     Encapsulation feature. A local user could use this flaw     to escalate their privileges or crash the     system.(CVE-2016-10200)

  - Mounting a crafted EXT4 image read-only leads to an     attacker controlled memory corruption and     SLAB-Out-of-Bounds reads.(CVE-2016-10208)

  - The Linux kernel allows remote attackers to execute     arbitrary code via UDP traffic that triggers an unsafe     second checksum calculation during execution of a recv     system call with the MSG_PEEK flag. This may create a     kernel panic or memory corruption leading to privilege     escalation.(CVE-2016-10229)

  - The overlayfs implementation in the Linux kernel     through 4.5.2 does not properly maintain POSIX ACL     xattr data, which allows local users to gain privileges     by leveraging a group-writable setgid     directory.(CVE-2016-1575)

  - The overlayfs implementation in the Linux kernel     through 4.5.2 does not properly restrict the mount     namespace, which allows local users to gain privileges     by mounting an overlayfs filesystem on top of a FUSE     filesystem, and then executing a crafted setuid     program.(CVE-2016-1576)

  - A syntax vulnerability was discovered in the kernel's     ASN1.1 DER decoder, which could lead to memory     corruption or a complete local denial of service     through x509 certificate DER files. A local system user     could use a specially created key file to trigger     BUG_ON() in the public_key_verify_signature() function     (crypto/asymmetric_keys/public_key.c), to cause a     kernel panic and crash the system.(CVE-2016-2053)

  - A flaw was discovered in the way the Linux kernel dealt     with paging structures. When the kernel invalidated a     paging structure that was not in use locally, it could,     in principle, race against another CPU that is     switching to a process that uses the paging structure     in question. A local user could use a thread running     with a stale cached virtual-i1/4zphysical translation to     potentially escalate their privileges if the     translation in question were writable and the physical     page got reused for something critical (for example, a     page table).(CVE-2016-2069)

  - A divide-by-zero vulnerability was found in a way the     kernel processes TCP connections. The error can occur     if a connection starts another cwnd reduction phase by     setting tp-i1/4zprior_cwnd to the current cwnd (0) in     tcp_init_cwnd_reduction(). A remote, unauthenticated     attacker could use this flaw to crash the kernel     (denial of service).(CVE-2016-2070)

  - It was discovered that the atl2_probe() function in the     Atheros L2 Ethernet driver in the Linux kernel     incorrectly enabled scatter/gather I/O. A remote     attacker could use this flaw to obtain potentially     sensitive information from the kernel     memory.(CVE-2016-2117)

  - The create_fixed_stream_quirk function in     sound/usb/quirks.c in the snd-usb-audio driver in the     Linux kernel before 4.5.1 allows physically proximate     attackers to cause a denial of service (NULL pointer     dereference or double free, and system crash) via a     crafted endpoints value in a USB device     descriptor.(CVE-2016-2184)

  - The ati_remote2_probe function in     drivers/input/misc/ati_remote2.c in the Linux kernel     before 4.5.1 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and     system crash) via a crafted endpoints value in a USB     device descriptor.(CVE-2016-2185)

  - The powermate_probe function in     drivers/input/misc/powermate.c in the Linux kernel     before 4.5.1 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and     system crash) via a crafted endpoints value in a USB     device descriptor.(CVE-2016-2186)

  - The gtco_probe function in drivers/input/tablet/gtco.c     in the Linux kernel through 4.5.2 allows physically     proximate attackers to cause a denial of service (NULL     pointer dereference and system crash) via a crafted     endpoints value in a USB device     descriptor.(CVE-2016-2187)

  - The iowarrior_probe function in     drivers/usb/misc/iowarrior.c in the Linux kernel before     4.5.1 allows physically proximate attackers to cause a     denial of service (NULL pointer dereference and system     crash) via a crafted endpoints value in a USB device     descriptor.(CVE-2016-2188)

  - A flaw was found in the USB-MIDI Linux kernel driver: a     double-free error could be triggered for the 'umidi'     object. An attacker with physical access to the system     could use this flaw to escalate their     privileges.(CVE-2016-2384)

  - The snd_seq_ioctl_remove_events function in     sound/core/seq/seq_clientmgr.c in the Linux kernel     before 4.4.1 does not verify FIFO assignment before     proceeding with FIFO clearing, which allows local users     to cause a denial of service (NULL pointer dereference     and OOPS) via a crafted ioctl call.(CVE-2016-2543)

  - Race condition in the queue_delete function in     sound/core/seq/seq_queue.c in the Linux kernel before     4.4.1 allows local users to cause a denial of service     (use-after-free and system crash) by making an ioctl     call at a certain time.(CVE-2016-2544)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A race condition flaw was found in the way the Linux     kernel's SCTP implementation handled sctp_accept()     during the processing of heartbeat timeout events. A     remote attacker could use this flaw to prevent further     connections to be accepted by the SCTP server running     on the system, resulting in a denial of     service.(CVE-2015-8767)

  - The ovl_setattr function in fs/overlayfs/inode.c in the     Linux kernel through 4.3.3 attempts to merge distinct     setattr operations, which allows local users to bypass     intended access restrictions and modify the attributes     of arbitrary overlay files via a crafted     application.(CVE-2015-8660)

  - Several Moderate and Low impact security issues were     found in the Linux kernel. Space precludes documenting     each of these issues in this advisory. Refer to the CVE     links in the References section for a description of     each of these vulnerabilities. (CVE-2015-8746,     CVE-2015-8812, CVE-2016-2069, CVE-2016-2117,     CVE-2016-2384, CVE-2016-2847)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3588 advisory.

    kernel-uek     [3.8.13-118.9.1]
    - mlx4: Increase SYNC_TPT command timeout (Mukesh Kacker)  [Orabug: 22895790]
    - neigh: do not modify unlinked entries (Julian Anastasov)  [Orabug: 23072705]
    - mm/slab: Improve performance of slabinfo stats gathering (Aruna Ramakrishna)  [Orabug: 23720437]
    - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23703901]  {CVE-2016-2117}     {CVE-2016-2117}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - vfs: rename: check backing inode being equal (Miklos     Szeredi) [Orabug: 24010060] (CVE-2016-6198)     (CVE-2016-6197)

  - vfs: add vfs_select_inode helper (Miklos Szeredi)     [Orabug: 24010060] (CVE-2016-6198) (CVE-2016-6197)

  - ovl: verify upper dentry before unlink and rename     (Miklos Szeredi) [Orabug: 24010060] (CVE-2016-6198)     (CVE-2016-6197)

  - ovl: fix getcwd failure after unsuccessful rmdir (Rui     Wang) [Orabug: 24010060] (CVE-2016-6198) (CVE-2016-6197)

  - xen: use same main loop for counting and remapping pages     (Juergen Gross) [Orabug: 24012238]

  - Revert 'ocfs2: bump up o2cb network protocol version'     (Junxiao Bi) 

  - atl2: Disable unimplemented scatter/gather feature (Ben     Hutchings) [Orabug: 23704078] (CVE-2016-2117)

  - Revert 'perf tools: Bump default sample freq to 4 kHz'     (ashok.vairavan) [Orabug: 23634802]

  - block: Initialize max_dev_sectors to 0 (Keith Busch)     [Orabug: 23333444]

  - sd: Fix rw_max for devices that report an optimal xfer     size (Martin K. Petersen) [Orabug: 23333444]

  - sd: Fix excessive capacity printing on devices with     blocks bigger than 512 bytes (Martin K. Petersen)     [Orabug: 23333444]

  - sd: Optimal I/O size is in bytes, not sectors (Martin K.
    Petersen) 

  - sd: Reject optimal transfer length smaller than page     size (Martin K. Petersen) [Orabug: 23333444]

  - Fix kabi issue for upstream commit ca369d51 (Joe Jin)     [Orabug: 23333444]

  - block/sd: Fix device-imposed transfer length limits (Joe     Jin)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - mlx4: Increase SYNC_TPT command timeout (Mukesh Kacker)     [Orabug: 22895790]

  - neigh: do not modify unlinked entries (Julian Anastasov)     [Orabug: 23072705]

  - mm/slab: Improve performance of slabinfo stats gathering     (Aruna Ramakrishna) [Orabug: 23720437]

  - atl2: Disable unimplemented scatter/gather feature (Ben     Hutchings) [Orabug: 23703901] (CVE-2016-2117)     (CVE-2016-2117)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3589 advisory.

    - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23703990]  {CVE-2016-2117}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed :

  - CVE-2015-1350: The VFS subsystem in the Linux kernel     provided an incomplete set of requirements for setattr     operations that underspecifies removing extended     privilege attributes, which allowed local users to cause     a denial of service (capability stripping) via a failed     invocation of a system call, as demonstrated by using     chown to remove a capability from the ping or Wireshark     dumpcap program (bnc#914939).

  - CVE-2016-2117: The atl2_probe function in     drivers/net/ethernet/atheros/atlx/atl2.c in the Linux     kernel incorrectly enabled scatter/gather I/O, which     allowed remote attackers to obtain sensitive information     from kernel memory by reading packet data (bnc#968697).

  - CVE-2016-3070: The trace_writeback_dirty_page     implementation in include/trace/events/writeback.h in     the Linux kernel improperly interacted with     mm/migrate.c, which allowed local users to cause a     denial of service (NULL pointer dereference and system     crash) or possibly have unspecified other impact by     triggering a certain page move (bnc#979215).

  - CVE-2016-5243: The tipc_nl_compat_link_dump function in     net/tipc/netlink_compat.c in the Linux kernel did not     properly copy a certain string, which allowed local     users to obtain sensitive information from kernel stack     memory by reading a Netlink message (bnc#983212).

  - CVE-2016-7117: Use-after-free vulnerability in the
    __sys_recvmmsg function in net/socket.c in the Linux     kernel allowed remote attackers to execute arbitrary     code via vectors involving a recvmmsg system call that     is mishandled during error processing (bnc#1003077).

  - CVE-2016-9588: arch/x86/kvm/vmx.c in the Linux kernel     mismanages the #BP and #OF exceptions, which allowed     guest OS users to cause a denial of service (guest OS     crash) by declining to handle an exception thrown by an     L2 guest (bnc#1015703).

  - CVE-2016-10044: The aio_mount function in fs/aio.c in     the Linux kernel did not properly restrict execute     access, which made it easier for local users to bypass     intended SELinux W^X policy restrictions, and     consequently gain privileges, via an io_setup system     call (bnc#1023992).

  - CVE-2016-10200: Race condition in the L2TPv3 IP     Encapsulation feature in the Linux kernel allowed local     users to gain privileges or cause a denial of service     (use-after-free) by making multiple bind system calls     without properly ascertaining whether a socket has the     SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and     net/l2tp/l2tp_ip6.c (bnc#1028415).

  - CVE-2016-10208: The ext4_fill_super function in     fs/ext4/super.c in the Linux kernel did not properly     validate meta block groups, which allowed physically     proximate attackers to cause a denial of service     (out-of-bounds read and system crash) via a crafted ext4     image (bnc#1023377).

  - CVE-2017-2671: The ping_unhash function in     net/ipv4/ping.c in the Linux kernel is too late in     obtaining a certain lock and consequently cannot ensure     that disconnect function calls are safe, which allowed     local users to cause a denial of service (panic) by     leveraging access to the protocol value of IPPROTO_ICMP     in a socket system call (bnc#1031003).

  - CVE-2017-5669: The do_shmat function in ipc/shm.c in the     Linux kernel did not restrict the address calculated by     a certain rounding operation, which allowed local users     to map page zero, and consequently bypass a protection     mechanism that exists for the mmap system call, by     making crafted shmget and shmat system calls in a     privileged context (bnc#1026914).

  - CVE-2017-5897: The ip6gre_err function in     net/ipv6/ip6_gre.c in the Linux kernel allowed remote     attackers to have unspecified impact via vectors     involving GRE flags in an IPv6 packet, which trigger an     out-of-bounds access (bnc#1023762).

  - CVE-2017-5970: The ipv4_pktinfo_prepare function in     net/ipv4/ip_sockglue.c in the Linux kernel allowed     attackers to cause a denial of service (system crash)     via (1) an application that made crafted system calls or     possibly (2) IPv4 traffic with invalid IP options     (bnc#1024938).

  - CVE-2017-5986: Race condition in the     sctp_wait_for_sndbuf function in net/sctp/socket.c in     the Linux kernel allowed local users to cause a denial     of service (assertion failure and panic) via a     multithreaded application that peels off an association     in a certain buffer-full state (bnc#1025235).

  - CVE-2017-6074: The dccp_rcv_state_process function in     net/dccp/input.c in the Linux kernel mishandled     DCCP_PKT_REQUEST packet data structures in the LISTEN     state, which allowed local users to obtain root     privileges or cause a denial of service (double free)     via an application that made an IPV6_RECVPKTINFO     setsockopt system call (bnc#1026024).

  - CVE-2017-6214: The tcp_splice_read function in     net/ipv4/tcp.c in the Linux kernel allowed remote     attackers to cause a denial of service (infinite loop     and soft lockup) via vectors involving a TCP packet with     the URG flag (bnc#1026722).

  - CVE-2017-6345: The LLC subsystem in the Linux kernel did     not ensure that a certain destructor exists in required     circumstances, which allowed local users to cause a     denial of service (BUG_ON) or possibly have unspecified     other impact via crafted system calls (bnc#1027190).

  - CVE-2017-6346: Race condition in net/packet/af_packet.c     in the Linux kernel allowed local users to cause a     denial of service (use-after-free) or possibly have     unspecified other impact via a multithreaded application     that made PACKET_FANOUT setsockopt system calls     (bnc#1027189).

  - CVE-2017-6348: The hashbin_delete function in     net/irda/irqueue.c in the Linux kernel improperly     managed lock dropping, which allowed local users to     cause a denial of service (deadlock) via crafted     operations on IrDA devices (bnc#1027178).

  - CVE-2017-6353: net/sctp/socket.c in the Linux kernel did     not properly restrict association peel-off operations     during certain wait states, which allowed local users to     cause a denial of service (invalid unlock and double     free) via a multithreaded application. NOTE: this     vulnerability exists because of an incorrect fix for     CVE-2017-5986 (bnc#1027066).

  - CVE-2017-7187: The sg_ioctl function in     drivers/scsi/sg.c in the Linux kernel allowed local     users to cause a denial of service (stack-based buffer     overflow) or possibly have unspecified other impact via     a large command size in an SG_NEXT_CMD_LEN ioctl call,     leading to out-of-bounds write access in the sg_write     function (bnc#1030213).

  - CVE-2017-7261: The vmw_surface_define_ioctl function in     drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux     kernel did not check for a zero value of certain levels     data, which allowed local users to cause a denial of     service (ZERO_SIZE_PTR dereference, and GPF and possibly     panic) via a crafted ioctl call for a /dev/dri/renderD*     device (bnc#1031052).

  - CVE-2017-7294: The vmw_surface_define_ioctl function in     drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux     kernel did not validate addition of certain levels data,     which allowed local users to trigger an integer overflow     and out-of-bounds write, and cause a denial of service     (system hang or crash) or possibly gain privileges, via     a crafted ioctl call for a /dev/dri/renderD* device     (bnc#1031440).

  - CVE-2017-7308: The packet_set_ring function in     net/packet/af_packet.c in the Linux kernel did not     properly validate certain block-size data, which allowed     local users to cause a denial of service (overflow) or     possibly have unspecified other impact via crafted     system calls (bnc#1031579).

  - CVE-2017-7616: Incorrect error handling in the     set_mempolicy and mbind compat syscalls in     mm/mempolicy.c in the Linux kernel allowed local users     to obtain sensitive information from uninitialized stack     data by triggering failure of a certain bitmap operation     (bnc#1033336).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds)     [Orabug: 24928646] (CVE-2016-5195)

  - HID: hiddev: validate num_values for HIDIOCGUSAGES,     HIDIOCSUSAGES commands (Scott Bauer) [Orabug: 24798694]     (CVE-2016-5829)

  - Revert 'rds: skip rx/tx work when destroying connection'     (Brian Maly) [Orabug: 24790158]

  - netfilter: x_tables: speed up jump target validation     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: enforce nul-terminated table name     from getsockopt GET_ENTRIES (Pablo Neira Ayuso) [Orabug:
    24690302] (CVE-2016-3134)

  - netfilter: remove unused comefrom hookmask argument     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: introduce and use     xt_copy_counters_from_user (Florian Westphal) [Orabug:
    24690302] (CVE-2016-3134)

  - netfilter: x_tables: do compat validation via     translate_table (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: xt_compat_match_from_user doesn't     need a retval (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: ip6_tables: simplify translate_compat_table     args (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: ip_tables: simplify translate_compat_table     args (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: arp_tables: simplify translate_compat_table     args (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: don't reject valid target size on     some architectures (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: validate all offsets and sizes in a     rule (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: check for bogus target offset     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: check standard target size too     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: add compat version of     xt_check_entry_offsets (Florian Westphal) [Orabug:
    24690302] (CVE-2016-3134)

  - netfilter: x_tables: assert minimum target size (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: kill check_entry helper (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: add and use xt_check_entry_offsets     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: validate targets of jumps (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: fix unconditional helper (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: validate targets of jumps (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: don't move to non-existent next     rule (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: fix unconditional helper (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: check for size overflow (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - ocfs2: Fix double put of recount tree in     ocfs2_lock_refcount_tree (Ashish Samant) [Orabug:
    24587406]

  - TTY: do not reset master's packet mode (Jiri Slaby)     [Orabug: 24569399]

  - ocfs2: Fix start offset to ocfs2_zero_range_for_truncate     (Ashish Samant) [Orabug: 24500401]

  - rds: skip rx/tx work when destroying connection (Wengang     Wang) 

  - Revert 'IPoIB: serialize changing on tx_outstanding'     (Wengang Wang) 

  - xen/events: document behaviour when scanning the start     word for events (Dongli Zhang) [Orabug: 23083945]

  - xen/events: mask events when changing their VCPU binding     (Dongli Zhang) [Orabug: 23083945]

  - xen/events: initialize local per-cpu mask for all     possible events (Dongli Zhang) [Orabug: 23083945]

  - IB/mlx4: Replace kfree with kvfree in     mlx4_ib_destroy_srq (Wengang Wang) [Orabug: 22570922]

  - NFS: Remove BUG_ON calls from the generic writeback code     (Trond Myklebust) [Orabug: 22386565]

  - ocfs2: return non-zero st_blocks for inline data (John     Haxby) 

  - oracleasm: Classify device connectivity issues as global     errors (Martin K. Petersen) [Orabug: 21760143]

  - Btrfs: fix truncation of compressed and inlined extents     (Divya Indi) [Orabug: 22307286] (CVE-2015-8374)

  - Btrfs: fix file corruption and data loss after cloning     inline extents (Divya Indi) [Orabug: 22307286]     (CVE-2015-8374)

  - netfilter: x_tables: make sure e->next_offset covers     remaining blob size (Florian Westphal) [Orabug:
    24682073] (CVE-2016-4997) (CVE-2016-4998)

  - netfilter: x_tables: validate e->target_offset early     (Florian Westphal) [Orabug: 24682071] (CVE-2016-4997)     (CVE-2016-4998)

  - rds: schedule local connection activity in proper     workqueue (Ajaykumar Hotchandani) [Orabug: 22819661]

  - ib_core: make wait_event uninterruptible in     ib_flush_fmr_pool (Avinash Repaka) [Orabug: 24525022]

  - net/mlx4: Support shutdown interface (Ajaykumar     Hotchandani) 

  - KEYS: potential uninitialized variable (Dan Carpenter)     [Orabug: 24393863] (CVE-2016-4470)

  - atl2: Disable unimplemented scatter/gather feature (Ben     Hutchings) [Orabug: 23703990] (CVE-2016-2117)

  - mlx4_core: add module parameter to disable background     init (Mukesh Kacker) [Orabug: 23292107]

  - NFSv4: Don't decode fs_locations if we didn't ask for     them... (Trond Myklebust) [Orabug: 23633714]

  - mm/slab: Improve performance of slabinfo stats gathering     (Aruna Ramakrishna) [Orabug: 23050884]

  - offload ib subnet manager port and node get info query     handling. (Rama Nichanamatlu) [Orabug: 22521735]

  - fix typo/thinko in get_random_bytes (Tony Luck) [Orabug:
    23726807]

ID	名稱	產品	系列	已發布	已更新	嚴重性
93679	OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0100)	Nessus	OracleVM Local Security Checks	2016/9/23	2021/1/4	critical
124815	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1491)	Nessus	Huawei Local Security Checks	2019/5/13	2024/5/23	critical
99783	EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1020)	Nessus	Huawei Local Security Checks	2017/5/1	2021/1/6	critical
92657	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3588)	Nessus	Oracle Linux Local Security Checks	2016/8/1	2024/10/22	high
92658	OracleVM 3.4 : kernel-uek (OVMSA-2016-0091)	Nessus	OracleVM Local Security Checks	2016/8/1	2021/1/4	high
92659	OracleVM 3.3 : kernel-uek (OVMSA-2016-0092)	Nessus	OracleVM Local Security Checks	2016/8/1	2021/1/4	high
92677	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3589)	Nessus	Oracle Linux Local Security Checks	2016/8/2	2024/11/1	high
100150	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1247-1)	Nessus	SuSE Local Security Checks	2017/5/12	2021/1/6	critical
94929	OracleVM 3.2 : Unbreakable / etc (OVMSA-2016-0158) (Dirty COW)	Nessus	OracleVM Local Security Checks	2016/11/17	2022/3/8	high

偵測

搜尋 Plugin

critical

critical

critical

high

high

high

high

critical

high