An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es) :

* A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings. An unprivileged, local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system. (CVE-2016-5195, Important)

* A flaw was found in the Linux kernel's keyring handling code: the key_reject_and_link() function could be forced to free an arbitrary memory block. An attacker could use this flaw to trigger a use-after-free condition on the system, potentially allowing for privilege escalation. (CVE-2016-4470, Important)

Red Hat would like to thank Phil Oester for reporting CVE-2016-5195.
The CVE-2016-4470 issue was discovered by David Howells (Red Hat).

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3052-1 advisory.

  - The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure     that a certain data structure is initialized, which allows local users to cause a denial of service     (system crash) via vectors involving a crafted keyctl request2 command. (CVE-2016-4470)

  - The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does     not properly copy a certain string, which allows local users to obtain sensitive information from kernel     stack memory by reading a Netlink message. (CVE-2016-5243)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3053-1 advisory.

  - nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions     by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c. (CVE-2016-1237)

  - The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure     that a certain data structure is initialized, which allows local users to cause a denial of service     (system crash) via vectors involving a crafted keyctl request2 command. (CVE-2016-4470)

  - Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a     denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf     system calls. (CVE-2016-4794)

  - The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does     not properly copy a certain string, which allows local users to obtain sensitive information from kernel     stack memory by reading a Netlink message. (CVE-2016-5243)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes the CVEs described below.

CVE-2016-3857

Chiachih Wu reported two bugs in the ARM OABI compatibility layer that can be used by local users for privilege escalation. The OABI compatibility layer is enabled in all kernel flavours for armel and armhf.

CVE-2016-4470

Wade Mealing of the Red Hat Product Security Team reported that in some error cases the KEYS subsystem will dereference an uninitialised pointer. A local user can use the keyctl() system call for denial of service (crash) or possibly for privilege escalation.

CVE-2016-5696

Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, and Srikanth V.
Krishnamurthy of the University of California, Riverside; and Lisa M.
Marvel of the United States Army Research Laboratory discovered that Linux's implementation of the TCP Challenge ACK feature results in a side channel that can be used to find TCP connections between specific IP addresses, and to inject messages into those connections.

Where a service is made available through TCP, this may allow remote attackers to impersonate another connected user to the server or to impersonate the server to another connected user. In case the service uses a protocol with message authentication (e.g. TLS or SSH), this vulnerability only allows denial of service (connection failure). An attack takes tens of seconds, so short-lived TCP connections are also unlikely to be vulnerable.

This may be mitigated by increasing the rate limit for TCP Challenge ACKs so that it is never exceeded: sysctl net.ipv4.tcp_challenge_ack_limit=1000000000

CVE-2016-5829

Several heap-based buffer overflow vulnerabilities were found in the hiddev driver, allowing a local user with access to a HID device to cause a denial of service or potentially escalate their privileges.

CVE-2016-6136

Pengfei Wang discovered that the audit subsystem has a 'double-fetch' or 'TOCTTOU' bug in its handling of special characters in the name of an executable. Where audit logging of execve() is enabled, this allows a local user to generate misleading log messages.

CVE-2016-6480

Pengfei Wang discovered that the aacraid driver for Adaptec RAID controllers has a 'double-fetch' or 'TOCTTOU' bug in its validation of 'FIB' messages passed through the ioctl() system call. This has no practical security impact in current Debian releases.

CVE-2016-6828

Marco Grassi reported a 'use-after-free' bug in the TCP implementation, which can be triggered by local users. The security impact is unclear, but might include denial of service or privilege escalation.

CVE-2016-7118

Marcin Szewczyk reported that calling fcntl() on a file descriptor for a directory on an aufs filesystem would result in am 'oops'. This allows local users to cause a denial of service. This is a Debian-specific regression introduced in version 3.2.81-1.

For Debian 7 'Wheezy', these problems have been fixed in version 3.2.81-2. This version also fixes a build failure (bug #827561) for custom kernels with CONFIG_MODULES disabled, a regression in version 3.2.81-1. It also updates the PREEMPT_RT featureset to version 3.2.81-rt117.

For Debian 8 'Jessie', CVE-2016-3857 has no impact; CVE-2016-4470 and CVE-2016-5829 were fixed in linux version 3.16.7-ckt25-2+deb8u3 or earlier; and the remaining issues are fixed in version 3.16.36-1+deb8u1.

We recommend that you upgrade your linux packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1539 advisory.

  - The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge     distinct setattr operations, which allows local users to bypass intended access restrictions and modify     the attributes of arbitrary overlay files via a crafted application. (CVE-2015-8660)

  - The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure     that a certain data structure is initialized, which allows local users to cause a denial of service     (system crash) via vectors involving a crafted keyctl request2 command. (CVE-2016-4470)

  - The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-     table levels, which allows local users to cause a denial of service (system crash) or possibly have     unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and     arch/s390/include/asm/pgalloc.h. (CVE-2016-2143)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for kernel is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

These updated kernel packages include several security issues and numerous bug fixes, some of which you can see below. Space precludes documenting all of these bug fixes in this advisory. To see the complete list of bug fixes, users are directed to the related Knowledge Article: https://access.redhat.com/articles/2460971.

Security Fix(es) :

* A flaw was found in the Linux kernel's keyring handling code, where in key_reject_and_link() an uninitialised variable would eventually lead to arbitrary free address which could allow attacker to use a use-after-free style attack. (CVE-2016-4470, Important)

* The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
(CVE-2015-8660, Moderate)

* It was reported that on s390x, the fork of a process with four page table levels will cause memory corruption with a variety of symptoms.
All processes are created with three level page table and a limit of 4TB for the address space. If the parent process has four page table levels with a limit of 8PB, the function that duplicates the address space will try to copy memory areas outside of the address space limit for the child process. (CVE-2016-2143, Moderate)

Red Hat would like to thank Nathan Williams for reporting CVE-2015-8660. The CVE-2016-4470 issue was discovered by David Howells (Red Hat Inc.).

Bug Fix(es) :

* The glibc headers and the Linux headers share certain definitions of key structures that are required to be defined in kernel and in userspace. In some instances both userspace and sanitized kernel headers have to be included in order to get the structure definitions required by the user program. Unfortunately because the glibc and Linux headers don't coordinate this can result in compilation errors.
The glibc headers have therefore been fixed to coordinate with Linux UAPI-based headers. With the header coordination compilation errors no longer occur. (BZ#1331285)

* When running the TCP/IPv6 traffic over the mlx4_en networking interface on the big endian architectures, call traces reporting about a 'hw csum failure' could occur. With this update, the mlx4_en driver has been fixed by correction of the checksum calculation for the big endian architectures. As a result, the call trace error no longer appears in the log messages. (BZ#1337431)

* Under significant load, some applications such as logshifter could generate bursts of log messages too large for the system logger to spool. Due to a race condition, log messages from that application could then be lost even after the log volume dropped to manageable levels. This update fixes the kernel mechanism used to notify the transmitter end of the socket used by the system logger that more space is available on the receiver side, removing a race condition which previously caused the sender to stop transmitting new messages and allowing all log messages to be processed correctly. (BZ#1337513)

* Previously, after heavy open or close of the Accelerator Function Unit (AFU) contexts, the interrupt packet went out and the AFU context did not see any interrupts. Consequently, a kernel panic could occur.
The provided patch set fixes handling of the interrupt requests, and kernel panic no longer occurs in the described situation. (BZ#1338886)

* net: recvfrom would fail on short buffer. (BZ#1339115)

* Backport rhashtable changes from upstream. (BZ#1343639)

* Server Crashing after starting Glusterd & creating volumes.
(BZ#1344234)

* RAID5 reshape deadlock fix. (BZ#1344313)

* BDX perf uncore support fix. (BZ#1347374)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0100 for details.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds)     [Orabug: 24928646] (CVE-2016-5195)

  - HID: hiddev: validate num_values for HIDIOCGUSAGES,     HIDIOCSUSAGES commands (Scott Bauer) [Orabug: 24798694]     (CVE-2016-5829)

  - Revert 'rds: skip rx/tx work when destroying connection'     (Brian Maly) [Orabug: 24790158]

  - netfilter: x_tables: speed up jump target validation     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: enforce nul-terminated table name     from getsockopt GET_ENTRIES (Pablo Neira Ayuso) [Orabug:
    24690302] (CVE-2016-3134)

  - netfilter: remove unused comefrom hookmask argument     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: introduce and use     xt_copy_counters_from_user (Florian Westphal) [Orabug:
    24690302] (CVE-2016-3134)

  - netfilter: x_tables: do compat validation via     translate_table (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: xt_compat_match_from_user doesn't     need a retval (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: ip6_tables: simplify translate_compat_table     args (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: ip_tables: simplify translate_compat_table     args (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: arp_tables: simplify translate_compat_table     args (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: don't reject valid target size on     some architectures (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: validate all offsets and sizes in a     rule (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: check for bogus target offset     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: check standard target size too     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: add compat version of     xt_check_entry_offsets (Florian Westphal) [Orabug:
    24690302] (CVE-2016-3134)

  - netfilter: x_tables: assert minimum target size (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: kill check_entry helper (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: add and use xt_check_entry_offsets     (Florian Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: validate targets of jumps (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: fix unconditional helper (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: validate targets of jumps (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: don't move to non-existent next     rule (Florian Westphal) [Orabug: 24690302]     (CVE-2016-3134)

  - netfilter: x_tables: fix unconditional helper (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - netfilter: x_tables: check for size overflow (Florian     Westphal) [Orabug: 24690302] (CVE-2016-3134)

  - ocfs2: Fix double put of recount tree in     ocfs2_lock_refcount_tree (Ashish Samant) [Orabug:
    24587406]

  - TTY: do not reset master's packet mode (Jiri Slaby)     [Orabug: 24569399]

  - ocfs2: Fix start offset to ocfs2_zero_range_for_truncate     (Ashish Samant) [Orabug: 24500401]

  - rds: skip rx/tx work when destroying connection (Wengang     Wang) 

  - Revert 'IPoIB: serialize changing on tx_outstanding'     (Wengang Wang) 

  - xen/events: document behaviour when scanning the start     word for events (Dongli Zhang) [Orabug: 23083945]

  - xen/events: mask events when changing their VCPU binding     (Dongli Zhang) [Orabug: 23083945]

  - xen/events: initialize local per-cpu mask for all     possible events (Dongli Zhang) [Orabug: 23083945]

  - IB/mlx4: Replace kfree with kvfree in     mlx4_ib_destroy_srq (Wengang Wang) [Orabug: 22570922]

  - NFS: Remove BUG_ON calls from the generic writeback code     (Trond Myklebust) [Orabug: 22386565]

  - ocfs2: return non-zero st_blocks for inline data (John     Haxby) 

  - oracleasm: Classify device connectivity issues as global     errors (Martin K. Petersen) [Orabug: 21760143]

  - Btrfs: fix truncation of compressed and inlined extents     (Divya Indi) [Orabug: 22307286] (CVE-2015-8374)

  - Btrfs: fix file corruption and data loss after cloning     inline extents (Divya Indi) [Orabug: 22307286]     (CVE-2015-8374)

  - netfilter: x_tables: make sure e->next_offset covers     remaining blob size (Florian Westphal) [Orabug:
    24682073] (CVE-2016-4997) (CVE-2016-4998)

  - netfilter: x_tables: validate e->target_offset early     (Florian Westphal) [Orabug: 24682071] (CVE-2016-4997)     (CVE-2016-4998)

  - rds: schedule local connection activity in proper     workqueue (Ajaykumar Hotchandani) [Orabug: 22819661]

  - ib_core: make wait_event uninterruptible in     ib_flush_fmr_pool (Avinash Repaka) [Orabug: 24525022]

  - net/mlx4: Support shutdown interface (Ajaykumar     Hotchandani) 

  - KEYS: potential uninitialized variable (Dan Carpenter)     [Orabug: 24393863] (CVE-2016-4470)

  - atl2: Disable unimplemented scatter/gather feature (Ben     Hutchings) [Orabug: 23703990] (CVE-2016-2117)

  - mlx4_core: add module parameter to disable background     init (Mukesh Kacker) [Orabug: 23292107]

  - NFSv4: Don't decode fs_locations if we didn't ask for     them... (Trond Myklebust) [Orabug: 23633714]

  - mm/slab: Improve performance of slabinfo stats gathering     (Aruna Ramakrishna) [Orabug: 23050884]

  - offload ib subnet manager port and node get info query     handling. (Rama Nichanamatlu) [Orabug: 22521735]

  - fix typo/thinko in get_random_bytes (Tony Luck) [Orabug:
    23726807]

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The snd_timer_interrupt function in sound/core/timer.c     in the Linux kernel before 4.4.1 does not properly     maintain a certain linked list, which allows local     users to cause a denial of service (race condition and     system crash) via a crafted ioctl call.(CVE-2016-2545)

  - sound/core/timer.c in the Linux kernel before 4.4.1     uses an incorrect type of mutex, which allows local     users to cause a denial of service (race condition,     use-after-free, and system crash) via a crafted ioctl     call.(CVE-2016-2546)

  - sound/core/timer.c in the Linux kernel before 4.4.1     employs a locking approach that does not consider slave     timer instances, which allows local users to cause a     denial of service (race condition, use-after-free, and     system crash) via a crafted ioctl call.(CVE-2016-2547)

  - sound/core/timer.c in the Linux kernel before 4.4.1     retains certain linked lists after a close or stop     action, which allows local users to cause a denial of     service (system crash) via a crafted ioctl call,     related to the (1) snd_timer_close and (2)
    _snd_timer_stop functions.(CVE-2016-2548)

  - sound/core/hrtimer.c in the Linux kernel before 4.4.1     does not prevent recursive callback access, which     allows local users to cause a denial of service     (deadlock) via a crafted ioctl call.(CVE-2016-2549)

  - A resource-exhaustion vulnerability was found in the     kernel, where an unprivileged process could allocate     and accumulate far more file descriptors than the     process' limit. A local, unauthenticated user could     exploit this flaw by sending file descriptors over a     Unix socket and then closing them to keep the process'     fd count low, thereby creating kernel-memory or     file-descriptors exhaustion (denial of     service).(CVE-2016-2550)

  - It is possible for a single process to cause an OOM     condition by filling large pipes with data that are     never read. A typical process filling 4096 pipes with 1     MB of data will use 4 GB of memory and there can be     multiple such processes, up to a     per-user-limit.(CVE-2016-2847)

  - A security flaw was found in the Linux kernel that an     attempt to move page mapped by AIO ring buffer to the     other node triggers NULL pointer dereference at     trace_writeback_dirty_page(), because     aio_fs_backing_dev_info.dev is 0.(CVE-2016-3070)

  - A security flaw was found in the Linux kernel in the     mark_source_chains() function in     'net/ipv4/netfilter/ip_tables.c'. It is possible for a     user-supplied 'ipt_entry' structure to have a large     'next_offset' field. This field is not bounds checked     prior to writing to a counter value at the supplied     offset.(CVE-2016-3134)

  - An integer overflow vulnerability was found in the     Linux kernel in xt_alloc_table_info, which on 32-bit     systems can lead to small structure allocation and a     copy_from_user based heap corruption.(CVE-2016-3135)

  - The mct_u232_msr_to_state function in     drivers/usb/serial/mct_u232.c in the Linux kernel     before 4.5.1 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and     system crash) via a crafted USB device without two     interrupt-in endpoint descriptors.(CVE-2016-3136)

  - drivers/usb/serial/cypress_m8.c in the Linux kernel     before 4.5.1 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and     system crash) via a USB device without both an     interrupt-in and an interrupt-out endpoint descriptor,     related to the cypress_generic_port_probe and     cypress_open functions.(CVE-2016-3137)

  - The acm_probe function in drivers/usb/class/cdc-acm.c     in the Linux kernel before 4.5.1 allows physically     proximate attackers to cause a denial of service (NULL     pointer dereference and system crash) via a USB device     without both a control and a data endpoint     descriptor.(CVE-2016-3138)

  - The wacom_probe function in     drivers/input/tablet/wacom_sys.c in the Linux kernel     before 3.17 allows physically proximate attackers to     cause a denial of service (NULL pointer dereference and     system crash) via a crafted endpoints value in a USB     device descriptor.(CVE-2016-3139)

  - The digi_port_init function in     drivers/usb/serial/digi_acceleport.c in the Linux     kernel before 4.5.1 allows physically proximate     attackers to cause a denial of service (NULL pointer     dereference and system crash) via a crafted endpoints     value in a USB device descriptor.(CVE-2016-3140)

  - 'A security flaw was found in the Linux kernel's     networking subsystem that destroying the network     interface with huge number of ipv4 addresses assigned     keeps ''rtnl_lock'' spinlock for a very long time (up     to hour). This blocks many network-related operations,     including creation of new incoming ssh connections.

  - The problem is especially important for containers, as     the container owner has enough permissions to trigger     this and block a network access on a whole host,     outside the container.(CVE-2016-3156)'

  - A weakness was found in the Linux ASLR implementation.
    Any user able to running 32-bit applications in a x86     machine can disable ASLR by setting the RLIMIT_STACK     resource to unlimited.(CVE-2016-3672)

  - The ims_pcu_parse_cdc_data function in     drivers/input/misc/ims-pcu.c in the Linux kernel before     4.5.1 allows physically proximate attackers to cause a     denial of service (system crash) via a USB device     without both a master and a slave     interface.(CVE-2016-3689)

  - It was found that the Linux kernel's IPv6     implementation mishandled socket options. A local     attacker could abuse concurrent access to the socket     options to escalate their privileges, or cause a denial     of service (use-after-free and system crash) via a     crafted sendmsg system call.(CVE-2016-3841)

  - The usbip_recv_xbuff function in     drivers/usb/usbip/usbip_common.c in the Linux kernel     before 4.5.3 allows remote attackers to cause a denial     of service (out-of-bounds write) or possibly have     unspecified other impact via a crafted length value in     a USB/IP packet.(CVE-2016-3955)

  - A flaw was found in the Linux kernel's keyring handling     code: the key_reject_and_link() function could be     forced to free an arbitrary memory block. An attacker     could use this flaw to trigger a use-after-free     condition on the system, potentially allowing for     privilege escalation.(CVE-2016-4470)

  - The proc_connectinfo() function in     'drivers/usb/core/devio.c' in the Linux kernel through     4.6 does not initialize a certain data structure, which     allows local users to obtain sensitive information from     kernel stack memory via a crafted USBDEVFS_CONNECTINFO     ioctl call. The stack object 'ci' has a total size of 8     bytes. Its last 3 bytes are padding bytes which are not     initialized and are leaked to userland.(CVE-2016-4482)

  - A flaw was found in the way certain interfaces of the     Linux kernel's Infiniband subsystem used write() as     bi-directional ioctl() replacement, which could lead to     insufficient memory security checks when being invoked     using the splice() system call. A local unprivileged     user on a system with either Infiniband hardware     present or RDMA Userspace Connection Manager Access     module explicitly loaded, could use this flaw to     escalate their privileges on the system.(CVE-2016-4565)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
94463	RHEL 6 : kernel (RHSA-2016:2133) (Dirty COW)	Nessus	Red Hat Local Security Checks	11/2/2016	3/8/2022	high
92862	Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3052-1)	Nessus	Ubuntu Local Security Checks	8/11/2016	1/9/2024	medium
92863	Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-3053-1)	Nessus	Ubuntu Local Security Checks	8/11/2016	1/9/2024	high
93321	Debian DLA-609-1 : linux security update	Nessus	Debian Local Security Checks	9/6/2016	1/11/2021	high
92688	Oracle Linux 7 : kernel (ELSA-2016-1539)	Nessus	Oracle Linux Local Security Checks	8/3/2016	9/8/2021	high
92694	RHEL 7 : kernel (RHSA-2016:1539)	Nessus	Red Hat Local Security Checks	8/3/2016	10/24/2019	high
93679	OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0100)	Nessus	OracleVM Local Security Checks	9/23/2016	1/4/2021	critical
94929	OracleVM 3.2 : Unbreakable / etc (OVMSA-2016-0158) (Dirty COW)	Nessus	OracleVM Local Security Checks	11/17/2016	3/8/2022	high
124816	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1492)	Nessus	Huawei Local Security Checks	5/13/2019	5/23/2024	critical

Detections

Analytics

Plugins Search

high

medium

high

high

high

high

critical

high

critical