Security Fix(es) :

  - kernel: NULL pointer dereference in search_keyring     (CVE-2017-2647)

  - kernel: heap-based buffer overflow in     lbs_ibss_join_existing function in     drivers/net/wireless/marvell/libertas/cfg.c     (CVE-2019-14896)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3548 advisory.

    [2.6.32-754.33.1.OL6]
    - Update genkey [bug 25599697]

    [2.6.32-754.33.1]
    - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]

    [2.6.32-754.32.1]
    - [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson)     [1776569]
    - [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson)     [1776569]
    - [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
    - [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220]     {CVE-2017-2647}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
139895	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200826)	Nessus	Scientific Linux Local Security Checks	2020/8/27	2020/11/30	critical
180955	Oracle Linux 6 : kernel (ELSA-2020-3548)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2026/2/9	critical
178888	EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2023-2444)	Nessus	Huawei Local Security Checks	2023/7/26	2025/10/7	critical
137516	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2020-1674)	Nessus	Huawei Local Security Checks	2020/6/17	2023/4/25	critical

偵測

搜尋 Plugin

critical

critical

critical

critical